Re: [PATCH] bridge: netfilter: fix information leak
Patrick McHardy <[email protected]> Mon, 14 Feb 2011 16:50:31 +0100
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel,gmane.linux.kernel,gmane.linux.network.bridge.ebtables.user,gmane.linux.network.bridge.ebtables.devel,gmane.comp.security.firewalls.netfilter.general,gmane.linux.network |
|---|---|
| Message-ID | <[email protected]> |
Am 14.02.2011 11:54, schrieb Vasiliy Kulikov: > Struct tmp is copied from userspace. It is not checked whether the "name" > field is NULL terminated. This may lead to buffer overflow and passing > contents of kernel stack as a module name to try_then_request_module() and, > consequently, to modprobe commandline. It would be seen by all userspace > processes. > > Signed-off-by: Vasiliy Kulikov <[email protected]> Applied, thanks Vasiliy. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html