Linux kernel IPv6 hop-by-hop header denial of service
| linux-kernel-ipv6-dos (39171) |  Low Risk |
Description:
The Linux kernel is vulnerable to a denial of service. By sending a specially-crafted IPv6 packet containing a malformed hop-by-hop header, a remote attacker could cause a kernel panic.
Platforms Affected:
- Canonical, Ubuntu 6.10
- Canonical, Ubuntu 7.04
- Canonical, Ubuntu 7.10
- Linux, Kernel 2.6.20
- Linux, Kernel 2.6.20.1
- Linux, Kernel 2.6.20.10
- Linux, Kernel 2.6.20.11
- Linux, Kernel 2.6.20.12
- Linux, Kernel 2.6.20.13
- Linux, Kernel 2.6.20.14
- Linux, Kernel 2.6.20.15
- Linux, Kernel 2.6.20.2
- Linux, Kernel 2.6.20.3
- Linux, Kernel 2.6.20.4
- Linux, Kernel 2.6.20.5
- Linux, Kernel 2.6.20.6
- Linux, Kernel 2.6.20.7
- Linux, Kernel 2.6.20.8
- Linux, Kernel 2.6.20.9
- Linux, Kernel 2.6.21
- Linux, Kernel 2.6.21.1
- Linux, Kernel 2.6.21.2
- Linux, Kernel 2.6.21.3
- Linux, Kernel 2.6.21.4
- Linux, Kernel 2.6.21.6
- Linux, Kernel 2.6.21.7
- Linux, Kernel 2.6.22
Remedy:
Upgrade to the latest version of the Linux kernel (2.6.22-rc1 or later), available from the The Linux Kernel Archives Web site. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Denial of Service
References:
- The Linux Kernel Archives Web site, ChangeLog-2.6.22-rc1 at http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc1.
- BID-26943: Linux Kernel IPv6 Hop-By-Hop Header Remote Denial of Service Vulnerability
- CVE-2007-4567: Linux kernel 2.6.22 and earlier, and possibly other versions, does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packet.
- USN-558-1: Linux kernel vulnerabilities
- USN-574-1: Linux kernel vulnerabilities
Reported:
Dec 19, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net