Multiple Linux Vendor Zero-Length Fragment Vulnerability
BID:2247
Info
Multiple Linux Vendor Zero-Length Fragment Vulnerability
| Bugtraq ID: | 2247 |
| Class: | Serialization Error |
| CVE: |
CVE-1999-0431 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 08 1997 12:00AM |
| Updated: | Jul 11 2009 04:46AM |
| Credit: | Posted to BugTraq on March 24, 1999 by John McDonald < [email protected] > |
| Vulnerable: |
Linux kernel 2.2.17 Linux kernel 2.2.16 pre6 Linux kernel 2.2.16 Linux kernel 2.2.15 pre20 Linux kernel 2.2.15 pre16 Linux kernel 2.2.15 Linux kernel 2.2.14 Linux kernel 2.2.13 Linux kernel 2.2.12 Linux kernel 2.2.10 Linux kernel 2.2.3 Linux kernel 2.2 Linux kernel 2.1.89 |
| Not Vulnerable: |
Linux kernel 2.3.99 Linux kernel 2.3 .x Linux kernel 2.3 Linux kernel 2.2.4 |
Discussion
Multiple Linux Vendor Zero-Length Fragment Vulnerability
Linux kernel versions 2.1.89 to 2.2.3 are vulnerable to a denial of service attack caused when a 0-length IP fragment is received, if it is the first fragment in the list. Several thousands 0-length packets must be sent in order for this to initiate a denial of service against the target.
Linux kernel versions 2.1.89 to 2.2.3 are vulnerable to a denial of service attack caused when a 0-length IP fragment is received, if it is the first fragment in the list. Several thousands 0-length packets must be sent in order for this to initiate a denial of service against the target.
Exploit / POC
Multiple Linux Vendor Zero-Length Fragment Vulnerability
An exploit has been made available.
An exploit has been made available.
References
Multiple Linux Vendor Zero-Length Fragment Vulnerability
References:
References: