OpenBSD Kernel IP_CTLoutput Local Denial Of Service Vulnerability

Bugtraq ID:	13977
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jun 16 2005 12:00AM
Updated:	Jun 16 2005 12:00AM
Credit:	Discovery of this issue is credited to Stefan Miltchev.
Vulnerable:	OpenBSD OpenBSD 3.7 OpenBSD OpenBSD 3.6
Not Vulnerable:

OpenBSD Kernel IP_CTLoutput Local Denial Of Service Vulnerability

A local denial of service vulnerability affects OpenBSD.

The vendor reports that a local user may invoke 'getsockopt()' on an existing socket to trigger this vulnerability.

A local attacker may exploit this issue to trigger a kernel panic and deny service for legitimate users.

OpenBSD Kernel IP_CTLoutput Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OpenBSD Kernel IP_CTLoutput Local Denial Of Service Vulnerability

Solution:
The vendor has released patches to address this issue:


OpenBSD OpenBSD 3.7

• OpenBSD 002_getsockopt.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/002_getsockopt.pa tch

OpenBSD OpenBSD 3.6

• OpenBSD 017_getsockopt.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/017_getsockopt.pa tch

OpenBSD Kernel IP_CTLoutput Local Denial Of Service Vulnerability

References:

• OpenBSD Homepage (OpenBSD)