possible DoS in linux kernel

Dan Osterrath <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
There's an issue in the linux' IP routing handler that may result in a DoS 
attack. The problem is that someone can forge a specific IP address and send 
some packets to a linux host. The host queues these packets but put them all 
in the same queue as this is a hash table and all packets get the same hash 
value. If the queue gets full the kernel needs too much CPU cycles to clean 
up. I've read that 400 packets per second should be enough to bring a common 
workstation to the edge.
At the moment there's no exploit available.

http://rhn.redhat.com/errata/RHSA-2003-172.html
-- 
----------------------------------------------------------------------
%> ln -s /dev/null /dev/brain
%> ln -s /dev/urandom /dev/world
%> dd if=/dev/world of=/dev/brain
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA+x7Ol9NbB8EM160MRAsveAJ9VDN70N8BXakm0U1eZQ91CgAF8uQCg3Krm
9nlA62XQkX38BE8QoUgt3vA=
=V6vP
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.