Bug 199312

Summary:	Linux <= 2.6.24-rc2 tcp_sacktag_write_queue Remote DoS (CVE-2007-5501)
Product:	Gentoo Security	Reporter:	Robert Buchholz (RETIRED) <rbu>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel, svrmarty
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=96a2d41a3e495734b63bff4e5dd0112741b93b38
Whiteboard:	[linux < 2.6.24][genpatches < 2.6.24-1]
Package list:		Runtime testing required:	---

Description Robert Buchholz (RETIRED) gentoo-dev

2007-11-16 00:05:28 UTC

CVE-2007-5501 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5501):
  The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel
  2.6.24-rc2 and earlier allows remote attackers to cause a denial of service
  (crash) via crafted ACK responses that trigger a NULL pointer dereference.

Comment 1 svrmarty 2009-08-05 16:00:36 UTC

latest update from 2007

please close