OpenBSD IPv6 remote kernel crash
"Thor Larholm" <[email protected]>
| Newsgroups | gmane.comp.security.vulnerabilities.watch.announce |
|---|---|
| Message-ID | <116201c3ec3b$8d5db4a0$6401a8c0@0xff> |
Georgi Guninski posted an advisory on his site about a remote crash in the OpenBSD kernel caused by connecting with a small IPv6 MTU. http://www.guninski.com/obsdmtu.html The error was present in revision 1.81 of /src/sys/netinet6/ip6_output.c and is fixed in revision 1.82 ( 2004/02/04 08:47:41 ), you can see the colored diffs at http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c.diff?r1=text&tr1=1.81&r2=text&tr2=1.82&f=h OpenBSD administrators should pull the revised code from CVS and recompile their kernels. Regards Thor Larholm Senior Security Researcher PivX Solutions 24 Corporate Plaza #180 Newport Beach, CA 92660 http://www.pivx.com [email protected] Phone: +1 (949) 231-8496 PGP: 0x5A276569 6BB1 B77F CB62 0D3D 5A82 C65D E1A4 157C 5A27 6569 PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of Qwik-Fix <http://www.qwik-fix.net>