FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

Bugtraq ID:	3152
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 06 2001 12:00AM
Updated:	Aug 06 2001 12:00AM
Credit:	Discovery credited to James Thomas.
Vulnerable:	FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.1.1 FreeBSD FreeBSD 4.1 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 3.5 FreeBSD FreeBSD 3.4 FreeBSD FreeBSD 3.3 FreeBSD FreeBSD 3.2 FreeBSD FreeBSD 3.1 FreeBSD FreeBSD 3.0
Not Vulnerable:	FreeBSD FreeBSD 4.4

FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

FreeBSD contains a vulnerability in it's TCP/IP implementation that may lead to possible denial of service conditions.

FreeBSD does not limit how many IP fragment reassembly queues can be created. A remote attacker may be able to exhaust resources by causing the creation of a large number of reassembly queues.

NetBSD, OpenBSD and BSDI may also be vulnerable to this attack.

FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

Solution:
FreeBSD has made kernel source-code patches available for 4.x and 3.x systems.

FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

References: