OSVDB ID: 69241 Title: Linux Kernel TCP MSS Divide-by-zero DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Linux Kernel contains a flaw that may allow a local denial of service. The issue is triggered when a user program passes a malformed TCP_MAXSEG value to tcp_select_initial_window, causing a divide-by-zero, resulting in loss of availability for the system. |
Classification |
Location:
Local Access Required
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Availability Solution: Upgrade Exploit: Exploit Unknown Disclosure: Uncoordinated Disclosure |
Solution |
Upgrade to version 2.6.37-rc2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
Unknown or Incomplete |