summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2017-5970
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2017-04-28 04:22:10 +0000
committerSalvatore Bonaccorso <carnil@debian.org>2017-04-28 04:22:10 +0000
commitf43050596507c5a376a3d6fbd8ee81f4be15d71b (patch)
treee142fb37d55ca9957d05eefd4f4856eec6fbb82d /retired/CVE-2017-5970
parent10767387e4a84e948ce275822bd4a100f187a559 (diff)
Retire two CVEs
git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@5240 e094ebfe-e918-0410-adfb-c712417f3574
Diffstat (limited to 'retired/CVE-2017-5970')
-rw-r--r--retired/CVE-2017-597015
1 files changed, 15 insertions, 0 deletions
diff --git a/retired/CVE-2017-5970 b/retired/CVE-2017-5970
new file mode 100644
index 00000000..7b30fd0d
--- /dev/null
+++ b/retired/CVE-2017-5970
@@ -0,0 +1,15 @@
+Description: ipv4: Invalid IP options could cause skb->dst drop
+References:
+ http://seclists.org/oss-sec/2017/q1/414
+ https://patchwork.ozlabs.org/patch/724136/
+Notes:
+ bwh> This was actually introduced in 2.6.35 by commit f84af32cbca70
+ bwh> ("net: ip_queue_rcv_skb() helper").
+Bugs:
+upstream: released (4.10-rc8) [34b2cef20f19c87999fff3da4071e66937db9644]
+4.9-upstream-stable: released (4.9.11) [f5b54446630a973e1f27b68599366bbd0ac53066]
+3.16-upstream-stable: released (3.16.41) [ipv4-keep-skb-dst-around-in-presence-of-ip-options.patch]
+3.2-upstream-stable: released (3.2.88) [ipv4-keep-skb-dst-around-in-presence-of-ip-options.patch]
+sid: released (4.9.10-1) [bugfix/all/ipv4-keep-skb-dst-around-in-presence-of-IP-options.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u1) [bugfix/all/ipv4-keep-skb-dst-around-in-presence-of-ip-options.patch]
+3.2-wheezy-security: released (3.2.88-1)

© 2014-2024 Faster IT GmbH | imprint | privacy policy