Linux UDP Denial of Service Vulnerability
BID:3094
Info
Linux UDP Denial of Service Vulnerability
| Bugtraq ID: | 3094 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2001 12:00AM |
| Updated: | Jul 25 2001 12:00AM |
| Credit: | Reported to Bugtraq by Stefan Laudat <[email protected]> on July 25, 2001. |
| Vulnerable: |
Linux kernel 2.4.6 Linux kernel 2.4.5 Linux kernel 2.4.4 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 Linux kernel 2.3 .x Linux kernel 2.2 .x Linux kernel 2.1 .x Linux kernel 2.0 .x |
| Not Vulnerable: | |
Discussion
Linux UDP Denial of Service Vulnerability
A potential denial of service vulnerability exists in the Linux Kernel.
The problem occurs when a large number of UDP packets are sent to a Linux system. This can cause the system to use all available CPU resources and thus become unresponsive.
The attack can be performed by sending UDP packets to any port on the system, regardless of whether a service is listening on that port. The system may have to be reset manually if the attack is successful.
Further technical details are forthcoming.
A potential denial of service vulnerability exists in the Linux Kernel.
The problem occurs when a large number of UDP packets are sent to a Linux system. This can cause the system to use all available CPU resources and thus become unresponsive.
The attack can be performed by sending UDP packets to any port on the system, regardless of whether a service is listening on that port. The system may have to be reset manually if the attack is successful.
Further technical details are forthcoming.
Exploit / POC
Linux UDP Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux UDP Denial of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.