Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-s390xUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-smpUpgrade kernel-pseries64Upgrade um-host-kernelUpgrade kernel-sn2Upgrade kernel-64k-pagesizeUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-umUpgrade kernel-debug | Feb 17, 2015 | Nov 26, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.8.1-6-k7Upgrade linux-image-2.6.8.1-6-amd64-k8Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.8.1-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.8.1-6-power4-smpUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.8.1-6-686Upgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.8.1-6-power3Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.8.1-6-386 | Nov 8, 2024 | Nov 27, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub