Linux内核不明套接字缓冲区操作远程拒绝服务漏洞

漏洞信息详情

Linux内核不明套接字缓冲区操作远程拒绝服务漏洞

• CNNVD编号：CNNVD-200608-245
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2006-2446
  
• 漏洞类型：
  
  
  资料不足
  
• 发布时间：
  
  2006-08-15
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-08-15
  
• 厂        商：
  
  linux
• 漏洞来源：
  The original disco…

Linux 内核2.6.9版本，可能还包括其它版本的套接字缓冲区操作中的kfree_skb函数和 __skb_unlink函数存在竞争条件，远程攻击者可触发拒绝服务攻击(崩溃)，如使用LTP测试套进行TCP压力测试。

Linux kernel 2.6.10

• Ubuntu ide-modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udebUbuntu 5.10:

  http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.12/ide-modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udeb“>
  http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.12/ide-

  http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.12/ide-modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udeb“>
  modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udeb

Linux kernel 2.6.3

• Mandriva kernel-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-2.6.3.36mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-BOOT-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-BOOT-2.6.3.36mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-enterprise-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-i686-up-4GB-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-p3-smp-64GB-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-secure-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-secure-2.6.3.36mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-smp-2.6.3.36mdk-1-1mdk.i586.rpmCorporate 3.0:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

• Mandriva kernel-smp-2.6.3.36mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:

  http://www.mandriva.com/en/download“>
  http://www.mandriva.com/en/download

来源: MISC

链接:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192779

来源: REDHAT

名称: RHSA-2006:0575

链接:http://www.redhat.com/support/errata/RHSA-2006-0575.html

来源: BID

名称: 19475

链接:http://www.securityfocus.com/bid/19475

来源: MANDRIVA

名称: MDKSA-2007:025

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2007:025

来源: DEBIAN

名称: DSA-1184

链接:http://www.debian.org/security/2006/dsa-1184

来源: DEBIAN

名称: DSA-1183

链接:http://www.debian.org/security/2006/dsa-1183

来源: support.avaya.com

链接:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

来源: SECUNIA

名称: 22417

链接:http://secunia.com/advisories/22417

来源: SECUNIA

名称: 22093

链接:http://secunia.com/advisories/22093

来源: SECUNIA

名称: 22082

链接:http://secunia.com/advisories/22082

来源: SECUNIA

名称: 21465

链接:http://secunia.com/advisories/21465

来源: MANDRIVA

名称: MDKSA-2007:025

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:025