CVE-2023-49062

Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP v4 Too Big packet generation. After a bpfxdpadjusthead call, Katran code didn’t initialize the Identification field for the IPv4 header, resulting in writing content ...

CVE-2023-49062: Improper Initialization

Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP v4 Too Big packet generation. After a bpfxdpadjusthead call, Katran code didn’t initialize the Identification field for the IPv4 header, resulting in writing content ...

PT-2023-31041

Name of the Vulnerable Software and Affected Versions Katran versions prior to commit 6a03106ac1eab39d0303662963589ecb2374c97f Description The issue allows Katran to disclose non-initialized kernel memory as part of an IP header. This occurs in IPv4 encapsulation and ICMP v4 Too Big packet...