The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-vmi-baseUpgrade kernel-paeUpgrade preload-kmp-defaultUpgrade preload-kmp-desktopUpgrade kernel-vanillaUpgrade kernel-source-vanillaUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-traceUpgrade kernel-vmi-develUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-vmiUpgrade kernel-desktop-baseUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-desktop-develUpgrade kernel-xen-base | Dec 12, 2013 | Jun 13, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-powerpc | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub