| Summary: | Kernel: ipv6: skb_dst() can be NULL (CVE-2010-0006) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Bjoern Tropf (RETIRED) <asym> |
| Component: | Kernel | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | kernel |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://marc.info/?l=linux-netdev&m=126343325807340&w=2 | ||
| Whiteboard: | [linux <2.6.34] | ||
| Package list: | Runtime testing required: | --- | |
|
Description
Bjoern Tropf (RETIRED)
2010-01-14 09:28:22 UTC
@Kernel: Please fix this issue in the next genpatch release. (Severity: low) CVE-2010-0006 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0006): The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567. |
