Netfilter Connection Tracking Denial of Service Vulnerability
BID:8331
Info
Netfilter Connection Tracking Denial of Service Vulnerability
| Bugtraq ID: | 8331 |
| Class: | Design Error |
| CVE: |
CVE-2003-0187 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 02 2003 12:00AM |
| Updated: | Jul 11 2009 10:56PM |
| Credit: | Announced by the Netfilter Core Team. |
| Vulnerable: |
Redhat kernel-utils-2.4-8.29.i386.rpm Redhat kernel-utils-2.4-8.13.i386.rpm Redhat kernel-utils-2.4-7.4.i386.rpm Redhat kernel-uml-2.4.18-14.i686.rpm Redhat kernel-source-2.4.7-10.i386.rpm Redhat kernel-source-2.4.20-8.i386.rpm Redhat kernel-source-2.4.2-2.i386.rpm Redhat kernel-source-2.4.18-3.i386.rpm Redhat kernel-source-2.4.18-14.i386.rpm Redhat kernel-smp-2.4.7-10.i686.rpm Redhat kernel-smp-2.4.7-10.i586.rpm Redhat kernel-smp-2.4.7-10.athlon.rpm Redhat kernel-smp-2.4.20-8.i686.rpm Redhat kernel-smp-2.4.20-8.athlon.rpm Redhat kernel-smp-2.4.2-2.i686.rpm Redhat kernel-smp-2.4.2-2.i586.rpm Redhat kernel-smp-2.4.18-3.i686.rpm Redhat kernel-smp-2.4.18-3.i586.rpm Redhat kernel-smp-2.4.18-3.athlon.rpm Redhat kernel-smp-2.4.18-14.i686.rpm Redhat kernel-smp-2.4.18-14.athlon.rpm Redhat kernel-headers-2.4.7-10.i386.rpm Redhat kernel-headers-2.4.2-2.i386.rpm Redhat kernel-enterprise-2.4.2-2.i686.rpm Redhat kernel-doc-2.4.7-10.i386.rpm Redhat kernel-doc-2.4.20-8.i386.rpm Redhat kernel-doc-2.4.2-2.i386.rpm Redhat kernel-doc-2.4.18-3.i386.rpm Redhat kernel-doc-2.4.18-14.i386.rpm Redhat kernel-debug-2.4.18-3.i686.rpm Redhat kernel-debug-2.4.18-14.i686.rpm Redhat kernel-BOOT-2.4.7-10.i386.rpm Redhat kernel-BOOT-2.4.20-8.i386.rpm Redhat kernel-BOOT-2.4.2-2.i386.rpm Redhat kernel-BOOT-2.4.18-3.i386.rpm Redhat kernel-BOOT-2.4.18-14.i386.rpm Redhat kernel-bigmem-2.4.20-8.i686.rpm Redhat kernel-bigmem-2.4.18-3.i686.rpm Redhat kernel-bigmem-2.4.18-14.i686.rpm Redhat kernel-2.4.7-10.i686.rpm Redhat kernel-2.4.7-10.i386.rpm Redhat kernel-2.4.7-10.athlon.rpm Redhat kernel-2.4.20-8.i686.rpm Redhat kernel-2.4.20-8.i586.rpm Redhat kernel-2.4.20-8.athlon.rpm Redhat kernel-2.4.2-2.i686.rpm Redhat kernel-2.4.2-2.i586.rpm Redhat kernel-2.4.2-2.i386.rpm Redhat kernel-2.4.18-3.i686.rpm Redhat kernel-2.4.18-3.i386.rpm Redhat kernel-2.4.18-3.athlon.rpm Redhat kernel-2.4.18-14.i686.rpm Redhat kernel-2.4.18-14.i586.rpm Redhat kernel-2.4.18-14.athlon.rpm Linux kernel 2.4.20 |
| Not Vulnerable: | |
Discussion
Netfilter Connection Tracking Denial of Service Vulnerability
A fix for a denial of service vulnerability has been reported by the Netfilter project. Linux 2.4.20 systems with kernels built supporting the CONFIG_IP_NF_CONNTRACK option or with the ip_conntrack module loaded are vulnerable. Other kernel versions are not affected. The vulnerability is due to the introduction into the Linux 2.4.20 kernel of a new generic linked list implementation. The reliance on the previous linked list implementation resulted in a condition which could result in a denial of service.
A fix for a denial of service vulnerability has been reported by the Netfilter project. Linux 2.4.20 systems with kernels built supporting the CONFIG_IP_NF_CONNTRACK option or with the ip_conntrack module loaded are vulnerable. Other kernel versions are not affected. The vulnerability is due to the introduction into the Linux 2.4.20 kernel of a new generic linked list implementation. The reliance on the previous linked list implementation resulted in a condition which could result in a denial of service.
References
Netfilter Connection Tracking Denial of Service Vulnerability
References:
References: