possible DoS in linux kernel
Dan Osterrath <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
There's an issue in the linux' IP routing handler that may result in a DoS attack. The problem is that someone can forge a specific IP address and send some packets to a linux host. The host queues these packets but put them all in the same queue as this is a hash table and all packets get the same hash value. If the queue gets full the kernel needs too much CPU cycles to clean up. I've read that 400 packets per second should be enough to bring a common workstation to the edge. At the moment there's no exploit available. http://rhn.redhat.com/errata/RHSA-2003-172.html -- ---------------------------------------------------------------------- %> ln -s /dev/null /dev/brain %> ln -s /dev/urandom /dev/world %> dd if=/dev/world of=/dev/brain
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+x7Ol9NbB8EM160MRAsveAJ9VDN70N8BXakm0U1eZQ91CgAF8uQCg3Krm 9nlA62XQkX38BE8QoUgt3vA= =V6vP -----END PGP SIGNATURE-----