Darron Froese (darron@odi.ca)
Tue, 1 Jun 1999 19:14:55 -0600 (MDT)
There's a new linux DOS floating out there - it was reported and patched
today. Here's the patch:
--- linux/net/ipv4/ip_options.c Wed May 12 16:49:38 1999
+++ net/ipv4/ip_options.c Tue Jun 1 22:11:46 1999
@@ -452,7 +452,6 @@
error:
if (skb) {
icmp_send(skb, ICMP_PARAMETERPROB, 0, htonl((pp_ptr-iph)<<24));
- kfree_skb(skb);
}
return -EINVAL;
}
For the curious and the paranoid, more info is available here:
The exploit with info: http://www.geek-girl.com/bugtraq/1999_2/0604.html
Patch from AC: http://www.geek-girl.com/bugtraq/1999_2/0607.html
Enjoy.
Darron
darron@odi.ca
http://darron.odi.ca/
This archive was generated by hypermail 2.0b3 on Wed Jun 30 1999 - 11:30:05 MDT