The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-PAE-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-PAEUpgrade kernel-debuginfo-commonUpgrade kernel-debug-debuginfoUpgrade kernel-xen-debuginfo | Dec 1, 2016 | Mar 12, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 12, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Mar 12, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub