Thread View: pl.comp.security
6 messages
6 total messages
Started by Zbigniew Zych
Wed, 30 Oct 1996 13:49
SECURITY: Bug in linux networking stack
Author: Zbigniew Zych
Date: Wed, 30 Oct 1996 13:49
Date: Wed, 30 Oct 1996 13:49
80 lines
3226 bytes
3226 bytes
[ Article reposted from comp.os.linux.announce ]
[ Author was Alan Cox <alan@cymru.net> ]
[ Posted on 30 Oct 1996 11:22:47 GMT ]
-----BEGIN PGP SIGNED MESSAGE-----
[ Moderator's note: I think there are newer, better versions of this
patch available. Check the web site. --liw ]
There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some
other systems can be brought down remotely by a suitably constructed
oversize packet. Unfortunately a bug in another well known PC operating
system means its easy to generate such packets.
** This bug is being actively exploited on the internet against all the
** mentioned systems. This fix should be considered essential as should
** other equivalent vendor fixes
The following Linux fix drops such faulty frames and will also be included
in 2.0.24
Alan Cox
[Patch also available from http://www.uk.linux.org/patches/]
- --- ip_fragment.c.old Mon Sep 16 22:14:52 1996
+++ ip_fragment.c Sat Oct 19 01:04:47 1996
@@ -366,7 +366,7 @@
{
NETDEBUG(printk("Invalid fragment list: Fragment over size.\n"));
ip_free(qp);
- - frag_kfree_skb(skb,FREE_WRITE);
+ kfree_skb(skb,FREE_WRITE);
ip_statistics.IpReasmFails++;
return NULL;
}
@@ -466,6 +466,18 @@
return NULL;
}
}
+
+ /*
+ * Attempt to construct an oversize packet.
+ */
+
+ if(ntohs(iph->tot_len)+(int)offset>65535)
+ {
+ skb->sk = NULL;
+ frag_kfree_skb(skb, FREE_READ);
+ ip_statistics.IpReasmFails++;
+ return NULL;
+ }
/*
* Determine the position of this fragment.
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
iQCVAwUBMnc51oQRll5MupLRAQFi/QP/ct/MNsptlomq/lHyc/8bDgebcTpZ/0fJ
Slrg6rNjxoexwu2476tBIJoASAR1+BYovsywUkDw3l2fJZy64qpBbzr9W9DU243m
/iXbNWU99icA+PmJSZa5gcGdfBg4Nd3zG/d88W5RPIfp3HZTOODRp+kTGZZFBleB
Vwg5vxK0yV0=
=QPXt
-----END PGP SIGNATURE-----
--
This article has been digitally signed by the moderator, using PGP.
http://www.iki.fi/liw/lars-public-key.asc has PGP key for validating signature.
Send submissions for comp.os.linux.announce to: linux-announce@news.ornl.gov
PLEASE remember a short description of the software and the LOCATION.
This group is archived at http://www.iki.fi/liw/linux/cola.html
Zbigniew Zych
--
Optimus SA Oddział Kraków, administrator, http://onet.pl/~zych/
Re: SECURITY: Bug in linux networking stack
Author: Staszek Pasko
Date: Wed, 30 Oct 1996 13:20
Date: Wed, 30 Oct 1996 13:20
22 lines
1609 bytes
1609 bytes
Zbigniew Zych <zych@onet.pl> wrote: : There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some : other systems can be brought down remotely by a suitably constructed : oversize packet. Unfortunately a bug in another well known PC operating : system means its easy to generate such packets. Heh... tylko podziekowac Microsoftowi... Na kazdym opakowaniu moglby rownie dobrze znajdowac sie napis "Zawiera oprogramowanie do zdalnego zawieszania innych systemow sieciowych.. instrukcje wewnatrz pudelka" Thanks Bill Gates. A na serio to raz microsoft zrobil cos pozytecznego - dzieki nim zostal odkryty bug :) -- /-= ID =----------/-= Adress =-------==-------= HTTP =-/-= IRC =-------/\ | Stanislaw Pasko | smoku@serek.arch.pwr.wroc.pl | #rpg-pl | | | AKA SMoku | http://www.arch.pwr.wroc.pl/~smoku | #hack #hackpl | | \-----------------\------------------------------------\---------------\/
Re: SECURITY: Bug in linux networking stack
Author: Rafal Maszkowski
Date: Wed, 30 Oct 1996 14:54
Date: Wed, 30 Oct 1996 14:54
20 lines
1633 bytes
1633 bytes
On 30 Oct 1996 13:20:33 GMT Staszek Pasko <smoku@serek.arch.pwr.wroc.pl> wrote: : Zbigniew Zych <zych@onet.pl> wrote: : : There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some : : other systems can be brought down remotely by a suitably constructed : : oversize packet. Unfortunately a bug in another well known PC operating : : system means its easy to generate such packets. : Heh... tylko podziekowac Microsoftowi... Na kazdym opakowaniu moglby : rownie dobrze znajdowac sie napis : "Zawiera oprogramowanie do zdalnego zawieszania innych systemow : sieciowych.. instrukcje wewnatrz pudelka" : Thanks Bill Gates. : A na serio to raz microsoft zrobil cos pozytecznego - dzieki nim zostal : odkryty bug :) Chociaz raz niezgodnosc MS ze standardami sie do czegos przydala. R. -- Rafal Maszkowski rzm@torun.pdi.net http://www.torun.pdi.net/~rzm Opinia publiczna powinna byc zaalarmowana swoim nieistnieniem - St. J. Lec
Re: SECURITY: Bug in linux networking stack
Author: Rafal Maszkowski
Date: Wed, 30 Oct 1996 14:55
Date: Wed, 30 Oct 1996 14:55
18 lines
1442 bytes
1442 bytes
On 30 Oct 1996 13:49:11 GMT Zbigniew Zych <zych@onet.pl> wrote: : There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some : other systems can be brought down remotely by a suitably constructed : oversize packet. Unfortunately a bug in another well known PC operating : system means its easy to generate such packets. : ** This bug is being actively exploited on the internet against all the : ** mentioned systems. This fix should be considered essential as should : ** other equivalent vendor fixes : The following Linux fix drops such faulty frames and will also be included : in 2.0.24 : Alan Cox Juz jest 2.0.24. R. -- Rafal Maszkowski rzm@torun.pdi.net http://www.torun.pdi.net/~rzm Opinia publiczna powinna byc zaalarmowana swoim nieistnieniem - St. J. Lec
Re: SECURITY: Bug in linux networking stack
Author: Zbigniew Zych
Date: Wed, 30 Oct 1996 20:24
Date: Wed, 30 Oct 1996 20:24
14 lines
1093 bytes
1093 bytes
Rafal Maszkowski <rzm@torun.pdi.net>: > On 30 Oct 1996 13:49:11 GMT Zbigniew Zych <zych@onet.pl> wrote: > : There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some > Juz jest 2.0.24. Linux rulez... Ja to wiem, Ty to wiesz... Jeszcze paru to wie... Pytanie: kiedy patche na inne systemy? Szczególnie mnie Solaris2.5 na x86 interesuje.... Zbigniew Zych -- Optimus SA Oddział Kraków, administrator, http://onet.pl/~zych/
Re: SECURITY: Bug in linux networking stack
Author: Rafal Maszkowski
Date: Thu, 31 Oct 1996 11:38
Date: Thu, 31 Oct 1996 11:38
16 lines
1391 bytes
1391 bytes
On 30 Oct 1996 20:24:05 GMT Zbigniew Zych <zych@onet.pl> wrote: : Rafal Maszkowski <rzm@torun.pdi.net>: : > On 30 Oct 1996 13:49:11 GMT Zbigniew Zych <zych@onet.pl> wrote: : > : There is a nasty bug whereby AIX, Digital Unix, Linux and possibly some : > Juz jest 2.0.24. : Linux rulez... Ja to wiem, Ty to wiesz... Jeszcze paru to wie... : Pytanie: kiedy patche na inne systemy? Szczególnie mnie Solaris2.5 na x86 : interesuje.... Pewnie sie dowiemy z dlugiego, kompletnego, dokladnego i jak zwykle opoznionego komunikatu CERT... R. -- Rafal Maszkowski rzm@torun.pdi.net http://www.torun.pdi.net/~rzm Opinia publiczna powinna byc zaalarmowana swoim nieistnieniem - St. J. Lec
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads