| Linux Kernel "tcp_v6_syn_recv_soc()" IPv6 Sockets Local Denial of Service Vulnerability | |||
| Posted by: Jordi on Saturday, March 24, 2007 - 02:12 AM | |||
 |
A vulnerability has been identified in Linux Kernel, which could be exploited by local attackers to cause a denial of service. This issue is due to an error in the "tcp_v6_syn_recv_soc()" [net/ipv6/tcp_ipv6.c] function where the IPv6 flow list (ipv6_fl_socklist) is shared with child sockets, which could be exploited by malicious users to crash an affected system by manipulating listening IPv6 TCP sockets. | ||
| Complete info at FrSIRT and SecuObs. | |||