Linux Kernel netfilter 远程拒绝服务漏洞

漏洞信息详情

Linux Kernel netfilter 远程拒绝服务漏洞

• CNNVD编号：CNNVD-200606-470
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2006-3085
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2006-06-23
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-06-26
  
• 厂        商：
  
  linux
• 漏洞来源：
  Linux

Linux kernel的netfilter中的xt_sctp远程攻击者借助0长度的SCTP块，引起拒绝服务(无限循环)。

目前厂商已经发布了相关补丁，请到厂商的主页下载：

S.u.S.E. Linux Professional 10.1

SuSE apparmor-admin_en-10-7.5.noarch.rpm

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-admin_en-1 0-7.5.noarch.rpm

SuSE apparmor-docs-2.0-17.5.noarch.rpm

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-docs-2.0-1 7.5.noarch.rpm

SuSE apparmor-profiles-2.0-34.9.noarch.rpm

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-profiles-2 .0-34.9.noarch.rpm

SuSE apparmor-utils-2.0-23.5.noarch.rpm

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-utils-2.0- 23.5.noarch.rpm

SuSE yast2-apparmor-2.0-27.5.noarch.rpm

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/yast2-apparmor-2.0- 27.5.noarch.rpm

Linux kernel 2.6 -test6

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test4

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test2

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test9-CVS

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test7

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test9

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test10

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6 -test11

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.1 -rc2

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.1

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.10 rc2

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.10

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.11 -rc3

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.11 .11

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.11 .7

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Linux kernel 2.6.11

Linux linux-2.6.17.1.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.1.tar.bz2

Mandriva drbd-utils-0.7.19-2.1.20060mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva drbd-utils-0.7.19-2.1.20060mdk.x86_64.rpm

Mandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva drbd-utils-heartbeat-0.7.19-2.1.20060mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva drbd-utils-heartbeat-0.7.19-2.1.20060mdk.x86_64.rpm

Mandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-2.6.12.23mdk-1-1mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-2.6.12.23mdk-1-1mdk.x86_64.rpm

Mandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-BOOT-2.6.12.23mdk-1-1mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-BOOT-2.6.12.23mdk-1-1mdk.x86_64.rpm

Mandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-i586-up-1GB-2.6.12.23mdk-1-1mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-i686-up-4GB-2.6.12.23mdk-1-1mdk.i586.rpm

Mandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva kernel-smp-2.6.12.23mdk-1-1mdk.i586.rpm

Mandriva Linux 2006.

来源: SECUNIA

名称: 20703

链接:http://secunia.com/advisories/20703

来源: SECTRACK

名称: 1016347

链接:http://securitytracker.com/id?1016347

来源: kernel.org

链接:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1

来源: XF

名称: linux-xt-sctp-dos(27384)

链接:http://xforce.iss.net/xforce/xfdb/27384

来源: TRUSTIX

名称: 2006-0037

链接:http://www.trustix.org/errata/2006/0037

来源: BID

名称: 18550

链接:http://www.securityfocus.com/bid/18550

来源: BUGTRAQ

名称: 20060623 rPSA-2006-0110-1 kernel

链接:http://www.securityfocus.com/archive/1/archive/1/438168/100/0/threaded

来源: OSVDB

名称: 26680

链接:http://www.osvdb.org/26680

来源: SUSE

名称: SUSE-SA:2006:047

链接:http://www.novell.com/linux/security/advisories/2006_47_kernel.html

来源: SUSE

名称: SUSE-SA:2006:042

链接:http://www.novell.com/linux/security/advisories/2006_42_kernel.html

来源: MANDRIVA

名称: MDKSA-2006:123

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:123

来源: VUPEN

名称: ADV-2006-2451

链接:http://www.frsirt.com/english/advisories/2006/2451

来源: SECUNIA

名称: 21498

链接:http://secunia.com/advisories/21498

来源: SECUNIA

名称: 21179

链接:http://secunia.com/advisories/21179

来源: SECUNIA

名称: 21045

链接:http://secunia.com/advisories/21045

来源: SECUNIA

名称: 20831

链接:http://secunia.com/advisories/20831

来源: MANDRIVA

名称: MDKSA-2006:123

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:123