blob: 089ed7bcc0e59b89c0e13d95afca0ae9a7c9e36f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
Candidate: CVE-2006-2444
References:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=1db6b5a66e93ff125ab871d6b3f7363412cc87e8
Description:
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before
2.6.16.18 allows remote attackers to cause a denial of service (crash) via
unspecified remote attack vectors that cause failures in snmp_trap_decode
that trigger (1) frees of random memory or (2) frees of previously-freed
memory (double-free) by snmp_trap_decode as well as its calling function, as
demonstrated via certain test cases of the PROTOS SNMP test suite.
Notes:
Bugs:
upstream: released (2.6.16.18)
linux-2.6: released (2.6.16-15)
2.6.8-sarge-security: released (2.6.8-16sarge5) [snmp-nat-mem-corruption-fix.dpatch]
2.4.27-sarge-security: released (2.4.27-10sarge4) [226_snmp-nat-mem-corruption-fix.diff]
|
