Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

Bugtraq ID:	7797
Class:	Design Error
CVE:	CVE-2003-0364
Remote:	Yes
Local:	No
Published:	Jun 03 2003 12:00AM
Updated:	Mar 19 2015 08:49AM
Credit:	Vulnerability announced by Red Hat.
Vulnerable:	RedHat kernel-utils-2.4-8.29.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-utils-2.4-8.13.i386.rpm RedHat kernel-utils-2.4-7.4.i386.rpm + RedHat Linux 7.3 i386 RedHat kernel-uml-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-source-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-source-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-source-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-source-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-source-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-smp-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.i586.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-smp-2.4.20-8.athlon.rpm RedHat kernel-smp-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-smp-2.4.2-2.i586.rpm RedHat kernel-smp-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.i586.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-smp-2.4.18-14.athlon.rpm + RedHat Linux 8.0 RedHat kernel-headers-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-headers-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-enterprise-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.7-10.i386.rpm RedHat kernel-doc-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-doc-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-doc-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-debug-2.4.18-3.i686.rpm RedHat kernel-debug-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-BOOT-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-BOOT-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-BOOT-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-BOOT-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-BOOT-2.4.18-14.i386.rpm RedHat kernel-bigmem-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-bigmem-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-bigmem-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.i586.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.athlon.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.2-2.i686.rpm RedHat kernel-2.4.2-2.i586.rpm RedHat kernel-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.i586.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.athlon.rpm RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 Red Hat Enterprise Linux AS 2.1 Linux kernel 2.4.20 Linux kernel 2.4.19 -pre6 Linux kernel 2.4.19 -pre5 Linux kernel 2.4.19 -pre4 Linux kernel 2.4.19 -pre3 Linux kernel 2.4.19 -pre2 Linux kernel 2.4.19 -pre1 Linux kernel 2.4.19 + Conectiva Linux 8.0 + Conectiva Linux Enterprise Edition 1.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + S.u.S.E. Linux 8.1 + Slackware Linux -current + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 Linux kernel 2.4.18 pre-8 Linux kernel 2.4.18 pre-7 Linux kernel 2.4.18 pre-6 Linux kernel 2.4.18 pre-5 Linux kernel 2.4.18 pre-4 Linux kernel 2.4.18 pre-3 Linux kernel 2.4.18 pre-2 Linux kernel 2.4.18 pre-1 Linux kernel 2.4.18 x86 + Debian Linux 3.0 ia-32 Linux kernel 2.4.18 + Astaro Security Linux 2.0 23 + Astaro Security Linux 2.0 16 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 + Red Hat Enterprise Linux AS 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 + RedHat Linux 8.0 + RedHat Linux 7.3 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Firewall on CD + S.u.S.E. Linux Office Server + S.u.S.E. Linux Openexchange Server + S.u.S.E. Linux Personal 8.2 + S.u.S.E. SuSE eMail Server 3.1 + S.u.S.E. SuSE eMail Server III + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 8.0 + Turbolinux Turbolinux Workstation 7.0 Linux kernel 2.4.17 Linux kernel 2.4.16 + Sun Cobalt RaQ 550 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 + Conectiva Linux 7.0 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 + Red Hat Enterprise Linux AS 2.1 IA64 + Red Hat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 + RedHat Linux 7.2 ia64 + RedHat Linux 7.2 i386 + RedHat Linux 7.2 alpha + RedHat Linux 7.1 ia64 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 alpha + Sun Linux 5.0.5 + Sun Linux 5.0.3 + Sun Linux 5.0 Linux kernel 2.4.8 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.7 + RedHat Linux 7.2 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 Linux kernel 2.4.6 Linux kernel 2.4.5 + Slackware Linux 8.0 Linux kernel 2.4.4 + S.u.S.E. Linux 7.2 Linux kernel 2.4.3 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 .0-test9 Linux kernel 2.4 .0-test8 Linux kernel 2.4 .0-test7 Linux kernel 2.4 .0-test6 Linux kernel 2.4 .0-test5 Linux kernel 2.4 .0-test4 Linux kernel 2.4 .0-test3 Linux kernel 2.4 .0-test2 Linux kernel 2.4 .0-test12 Linux kernel 2.4 .0-test11 Linux kernel 2.4 .0-test10 Linux kernel 2.4 .0-test1 Linux kernel 2.4
Not Vulnerable:

Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

It has been reported that the Linux kernel does not properly handle some specific types of network traffic. Because of this, an attacker may be able to cause excessive consumption of resources with malicious TCP/IP packets, resulting in a denial of service.

Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

Solution:
Red Hat has released advisory RHSA-2003:187-01 and fixes to address this issue. See referenced advisory for fix details.

Debian has issued a kernel upgrade that is patched. Please see the advisories linked to in the reference section (DSA-311-1 and DSA 312-1) for URLs to fixes.

Red Hat Linux has released a new advisory RHSA-2003:195-06. Fixes are available through the Red Hat Network. Affected users are advised to upgrade.

Debian has released a new advisory DSA 332-1. Information about obtaining and applying fixes can be found in the referenced advisory.

Debian has announced in DSA 336-2 that advisory DSA 336-1 does not address this issue.

Conectiva has released advisory CLA-2003:701 to address this issue. See referenced advisory for additional details and fix information.

Red Hat has released an advisory (RHSA-2003:198-16) containing updated IA64 fixes for Red Hat Enterprise Linux AS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor. These fixes are only available through the Red Hat Network which can be found at http://rhn.redhat.com/.

Conectiva has released a security advisory (CLSA-2003:730) containing fixes to address this issue in CLEE 1.0. Users are advised to upgrade as soon as possible.

RHBA-2003:263-05 (for non-Enterprise Red Hat distributions) has been released to address unrelated bugs but provides Kernel updates that include more recent fixes for this and other security vulnerabilities.

Conectiva has released a security advisory (CLA-2003:796) containing fixes to address this issue in Conectiva Linux 8.

Debian has released DSA 442-1 to provide fixes for s390 platforms. Please see the attached advisory for further information.


RedHat kernel-2.4.18-3.i686.rpm

• Red Hat kernel-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-20.7.i686.rpm

RedHat kernel-2.4.2-2.i386.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m


• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-20.7.i386.rpm

RedHat kernel-source-2.4.18-14.i386.rpm

• Red Hat kernel-source-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-source-2.4.20-20.8.i386 .rpm

RedHat kernel-bigmem-2.4.18-14.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.8.i686.rpm
  ftp://updates.redhat.com/8.0/en/os/i686/kernel-bigmem-2.4.20-20.8.i686 .rpm

RedHat kernel-BOOT-2.4.7-10.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.2-2.i386.rpm

• Red Hat kernel-doc-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-2.4.20-8.athlon.rpm

• Red Hat kernel-2.4.20-20.9.athlon.rpm
  ftp://updates.redhat.com/9/en/os/athlon/kernel-2.4.20-20.9.athlon.rpm

RedHat kernel-source-2.4.2-2.i386.rpm

• Red Hat kernel-source-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.7-10.athlon.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-doc-2.4.18-3.i386.rpm

• Red Hat kernel-doc-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-BOOT-2.4.20-8.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-BOOT-2.4.20-20.9.i386.rpm

RedHat kernel-2.4.20-8.i586.rpm

• Red Hat kernel-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-2.4.20-20.9.i386.rpm


• Red Hat kernel-2.4.20-20.9.i586.rpm
  ftp://updates.redhat.com/9/en/os/i586/kernel-2.4.20-20.9.i586.rpm

RedHat kernel-2.4.7-10.i686.rpm

• Red Hat kernel-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-20.7.i686.rpm


• Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-bigmem-2.4.20-8.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.9.i686.rpm
  ftp://updates.redhat.com/9/en/os/i686/kernel-bigmem-2.4.20-20.9.i686.r pm

RedHat kernel-source-2.4.20-8.i386.rpm

• Red Hat kernel-source-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-source-2.4.20-20.9.i386.r pm

RedHat kernel-2.4.20-8.i686.rpm

• Red Hat kernel-2.4.20-20.9.i686.rpm
  ftp://updates.redhat.com/9/en/os/i686/kernel-2.4.20-20.9.i686.rpm

RedHat kernel-BOOT-2.4.18-3.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.18-14.i386.rpm

• Red Hat kernel-doc-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-doc-2.4.20-20.8.i386.rp m

RedHat kernel-BOOT-2.4.2-2.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-2.4.7-10.i386.rpm

• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-20.7.i386.rpm


• Red Hat kernel-2.4.20-20.7.i586.rpm
  ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-2.4.18-3.athlon.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-2.4.18-3.i386.rpm

• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-20.7.i386.rpm


• Red Hat kernel-2.4.20-20.7.i586.rpm
  ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-bigmem-2.4.18-3.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-source-2.4.7-10.i386.rpm

• Red Hat kernel-source-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.18-14.i586.rpm

• Red Hat kernel-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-2.4.20-20.8.i386.rpm


• Red Hat kernel-2.4.20-20.8.i586.rpm
  ftp://updates.redhat.com/8.0/en/os/i586/kernel-2.4.20-20.8.i586.rpm

RedHat kernel-2.4.18-14.i686.rpm

• Red Hat kernel-2.4.20-20.8.i686.rpm
  ftp://updates.redhat.com/8.0/en/os/i686/kernel-2.4.20-20.8.i686.rpm

RedHat kernel-doc-2.4.20-8.i386.rpm

• Red Hat kernel-doc-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-doc-2.4.20-20.9.i386.rpm

Linux kernel 2.4.17

• Debian kernel-headers-2.4.17_2.4.17-2.woody.3_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.17-s39 0/kernel-headers-2.4.17_2.4.17-2.woody.3_s390.deb


• Debian kernel-image-2.4.17-s390_2.4.17-2.woody.3_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.17-s39 0/kernel-image-2.4.17-s390_2.4.17-2.woody.3_s390.deb


• Debian kernel-patch-2.4.17-s390_0.0.20020816-0.woody.2_all.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-s39 0/kernel-patch-2.4.17-s390_0.0.20020816-0.woody.2_all.deb

Linux kernel 2.4.18 x86

• Debian kernel-doc-2.4.18_2.4.18-9_all.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-doc-2.4.18_2.4.18-9_all.deb


• Debian kernel-headers-2.4.18-1-386_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-386_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1-586tsc_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-586tsc_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1-686-smp_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686-smp_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1-686_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1-k6_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k6_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1-k7_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k7_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-1_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1_2.4.18-8_i386.deb


• Debian kernel-headers-2.4.18-bf2.4_2.4.18-5woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-headers-2.4.18-bf2.4_2.4.18-5woody1_i386.deb


• Debian kernel-image-2.4.18-1-386_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-386_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-1-586tsc_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-586tsc_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-1-686-smp_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686-smp_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-1-686_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-1-k6_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k6_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-1-k7_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k7_2.4.18-8_i386.deb


• Debian kernel-image-2.4.18-bf2.4_2.4.18-5woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-image-2.4.18-bf2.4_2.4.18-5woody1_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-386_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-386_2.4.18-8_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-8_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-8_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-686_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686_2.4.18-8_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-8_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-8_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-8_i386.deb


• Debian kernel-source-2.4.18_2.4.18-9_all.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-source-2.4.18_2.4.18-9_all.deb


• Debian pcmcia-modules-2.4.18-bf2.4_3.1.33-6woody1k5woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody.
  http://security.debian.org/pool/updates/main/p/pcmcia-cs/pcmcia-module s-2.4.18-bf2.4_3.1.33-6woody1k5woody1_i386.deb

Linux kernel 2.4.19

• Conectiva devfsd-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/devfsd-2.4.19-1U80_20cl.i38 6.rpm


• Conectiva k_athlon-2.4.19-340.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_athlon-2.4.19-340.i5 86.rpm


• Conectiva k_debug-2.4.19-340.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_debug-2.4.19-340.i58 6.rpm


• Conectiva k_deflt-2.4.19-340.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_deflt-2.4.19-340.i58 6.rpm


• Conectiva k_psmp-2.4.19-340.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_psmp-2.4.19-340.i586 .rpm


• Conectiva k_smp-2.4.19-340.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_smp-2.4.19-340.i586. rpm


• Conectiva kernel-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i38 6.rpm


• Conectiva kernel-2.4.19-1U80_20cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i58 6.rpm


• Conectiva kernel-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i68 6.rpm


• Conectiva kernel-BOOT-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-BOOT-2.4.19-1U80_20c l.i386.rpm


• Conectiva kernel-doc-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-doc-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-enterprise-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-enterprise-2.4.19-1U 80_20cl.i686.rpm


• Conectiva kernel-headers-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-headers-2.4.19-1U80_ 20cl.i386.rpm


• Conectiva kernel-rbc-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-rbc-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i586.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i686.rpm


• Conectiva kernel-source-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-source-2.4.19-1U80_2 0cl.i386.rpm

Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

References:

• CLSA-2003:730 (Conectiva)
  
• RHBA-2003:263-05 Updated 2.4 kernel resolves obscure bugs. (Red Hat)
  
• RHSA-2003-198 (Red Hat)
  
• RHSA-2003:195-06 - Updated kernel addresses security vulnerabilities (Red Hat)