|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
The Linux kernel contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when custom crafted ICMP fragments are sent to the kernel, which will trigger an ICMP TTL exceeded error packet containing data from memory in response. This will disclose information in memory, resulting in a loss of confidentiality.
|
|
Classification |
Location:
Local Access Required,
Remote/Network Access Required
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to a kernel version of 2.2.19, 2.4.0 mainline, or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by applying the vendor-supplied patch.
|
|
Products |
|
Kernel
 |
2.2.18 |
2.2.14 |
2.2.15 |
2.2.16 |
2.2.17 |
2.2.10 |
2.4.0-preX |
mainline 2.4.x |
2.2.13 |
2.2.12 |
2.2.11 |
2.2.0x |
|
|
|
|
Credit |
- Andrew Griffiths - andrewg
 tasmail.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
