The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an amount of memory, which allows remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 2, 2015 |
| Suse | — | Upgrade ipset-kmp-xen-debuginfoUpgrade xen-tools-domU-debuginfoUpgrade kernel-ec2-debugsourceUpgrade pcfclock-kmp-pae-debuginfoUpgrade xen-tools-domUUpgrade pcfclock-kmp-desktop-debuginfoUpgrade virtualbox-websrvUpgrade vhba-kmp-desktop-debuginfoUpgrade hdjmod-kmp-default-debuginfoUpgrade xenUpgrade virtualbox-guest-kmp-paeUpgrade crash-kmp-defaultUpgrade virtualbox-develUpgrade hdjmod-kmp-paeUpgrade xtables-addons-kmp-desktopUpgrade xtables-addons-kmp-default-debuginfoUpgrade kernel-sourceUpgrade xtables-addonsUpgrade virtualbox-host-kmp-paeUpgrade ipset-kmp-desktopUpgrade vhba-kmp-default-debuginfoUpgrade crash-kmp-pae-debuginfoUpgrade xen-libsUpgrade kernel-xenUpgrade kernel-paeUpgrade virtualbox-guest-kmp-pae-debuginfoUpgrade pcfclock-kmp-desktopUpgrade kernel-debug-debuginfoUpgrade xen-libs-32bitUpgrade virtualbox-guest-desktop-iconsUpgrade xtables-addons-kmp-paeUpgrade cloop-kmp-xen-debuginfoUpgrade crash-eppic-debuginfoUpgrade kernel-pae-debugsourceUpgrade virtualbox-guest-tools-debuginfoUpgrade virtualbox-qt-debuginfoUpgrade kernel-desktop-debugsourceUpgrade kernel-vanillaUpgrade kernel-debugUpgrade cloop-kmp-xenUpgrade cloop-debugsourceUpgrade kernel-default-debugsourceUpgrade ipset-kmp-default-debuginfoUpgrade hdjmod-debugsourceUpgrade kernel-ec2-develUpgrade crash-kmp-xen-debuginfoUpgrade crash-debuginfoUpgrade crash-kmp-desktop-debuginfoUpgrade vhba-kmp-xenUpgrade ipset-kmp-pae-debuginfoUpgrade virtualbox-guest-toolsUpgrade virtualbox-host-kmp-desktop-debuginfoUpgrade kernel-debug-debugsourceUpgrade kernel-ec2-debuginfoUpgrade kernel-xen-baseUpgrade kernel-debug-baseUpgrade kernel-desktopUpgrade kernel-desktop-baseUpgrade xen-doc-htmlUpgrade virtualbox-guest-kmp-defaultUpgrade xtables-addons-debuginfoUpgrade xen-develUpgrade virtualbox-debugsourceUpgrade libipset3Upgrade kernel-obs-qaUpgrade crash-gcoreUpgrade kernel-desktop-base-debuginfoUpgrade virtualbox-qtUpgrade ipset-develUpgrade crash-kmp-xenUpgrade vhba-kmp-pae-debuginfoUpgrade kernel-pae-baseUpgrade hdjmod-kmp-xenUpgrade xen-libs-debuginfoUpgrade hdjmod-kmp-defaultUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade xen-kmp-desktop-debuginfoUpgrade python-virtualboxUpgrade virtualbox-guest-x11-debuginfoUpgrade kernel-xen-debugsourceUpgrade vhba-kmpUpgrade xtables-addons-debugsourceUpgrade kernel-obs-build-debugsourceUpgrade kernel-debug-develUpgrade xtables-addons-kmp-xenUpgrade kernel-ec2-base-debuginfoUpgrade kernel-ec2Upgrade libipset3-debuginfoUpgrade virtualbox-host-kmp-default-debuginfoUpgrade xen-libs-debuginfo-32bitUpgrade pcfclock-kmp-paeUpgrade crashUpgrade cloop-kmp-defaultUpgrade xtables-addons-kmp-pae-debuginfoUpgrade kernel-macrosUpgrade xtables-addons-kmp-desktop-debuginfoUpgrade ipsetUpgrade xen-tools-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade hdjmod-kmp-desktopUpgrade bbswitch-kmp-pae-debuginfoUpgrade bbswitchUpgrade cloop-kmp-paeUpgrade crash-debugsourceUpgrade crash-develUpgrade crash-docUpgrade hdjmod-kmp-pae-debuginfoUpgrade bbswitch-kmp-defaultUpgrade kernel-source-vanillaUpgrade bbswitch-kmp-paeUpgrade kernel-obs-buildUpgrade xen-debugsourceUpgrade vhba-kmp-desktopUpgrade kernel-develUpgrade kernel-pae-base-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade cloop-kmp-desktopUpgrade xtables-addons-kmp-defaultUpgrade crash-kmp-default-debuginfoUpgrade virtualbox-guest-kmp-desktop-debuginfoUpgrade kernel-obs-qa-xenUpgrade cloop-debuginfoUpgrade pcfclock-debuginfoUpgrade bbswitch-kmp-default-debuginfoUpgrade virtualbox-host-kmp-defaultUpgrade cloopUpgrade kernel-ec2-baseUpgrade vhba-kmp-defaultUpgrade pcfclock-kmp-defaultUpgrade vhba-kmp-debugsourceUpgrade ipset-kmp-paeUpgrade kernel-defaultUpgrade crash-eppicUpgrade kernel-desktop-develUpgrade xen-kmp-desktopUpgrade bbswitch-debugsourceUpgrade ipset-kmp-desktop-debuginfoUpgrade cloop-kmp-default-debuginfoUpgrade virtualbox-guest-x11Upgrade virtualbox-host-kmp-pae-debuginfoUpgrade kernel-pae-debuginfoUpgrade bbswitch-kmp-xenUpgrade kernel-xen-debuginfoUpgrade ipset-kmp-defaultUpgrade kernel-vanilla-develUpgrade crash-gcore-debuginfoUpgrade hdjmod-kmp-desktop-debuginfoUpgrade pcfclock-kmp-default-debuginfoUpgrade kernel-default-baseUpgrade hdjmodUpgrade bbswitch-kmp-xen-debuginfoUpgrade hdjmod-kmp-xen-debuginfoUpgrade ipset-kmp-xenUpgrade crash-kmp-desktopUpgrade cloop-kmp-desktop-debuginfoUpgrade virtualbox-websrv-debuginfoUpgrade pcfclockUpgrade vhba-kmp-paeUpgrade kernel-pae-develUpgrade virtualboxUpgrade kernel-docsUpgrade vhba-kmp-xen-debuginfoUpgrade ipset-debugsourceUpgrade cloop-kmp-pae-debuginfoUpgrade virtualbox-guest-kmp-default-debuginfoUpgrade xen-toolsUpgrade kernel-vanilla-debugsourceUpgrade virtualbox-host-kmp-desktopUpgrade xtables-addons-kmp-xen-debuginfoUpgrade xen-kmp-default-debuginfoUpgrade pcfclock-debugsourceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-desktop-debuginfoUpgrade bbswitch-kmp-desktop-debuginfoUpgrade kernel-default-base-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade bbswitch-kmp-desktopUpgrade crash-kmp-paeUpgrade virtualbox-debuginfoUpgrade ipset-debuginfoUpgrade virtualbox-guest-kmp-desktopUpgrade python-virtualbox-debuginfoUpgrade xen-kmp-default | Dec 18, 2015 | Jan 2, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-lowlatency | Nov 8, 2024 | Jan 2, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub