Linux Kernel AppleTalk-IP内存泄露拒绝服务漏洞

BUGTRAQ ID: 36379 CVECAN ID: CVE-2009-2903 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于加载了appletalk和ipddp模块的Linux主机，在检查ipddpN设备时如果该设备不存在handleipoverddp函数会对atalkrcv函数返回-NODEV，之后atalkrcv函数直接将该值返回给调用程序。由于对不可接受的IP-DDP数据报缺少 kfreeskb调用，向目标主机发送足够多的AppleTalk-IP数据报就会耗尽可用的内核内存。 Linux kernel 2.6.x 厂商补丁： Linux -----...

CVE-2009-2903

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service memory consumption via IP-DDP datagrams...

CVE-2009-2903

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service memory consumption via IP-DDP datagrams...

CVE-2009-2903

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service memory consumption via IP-DDP datagrams...

CVE-2009-2903: Missing Release of Resource after Effective Lifetime

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service memory consumption via IP-DDP datagrams...

BRS WebWeaver HTTP Server DDP vulnerability

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver HTTP Server DDP vulnerability product: BRS WebWeaver 1.01, 1.03 HTTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/14/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls:...