kernel: deficiency in processing igmp host membership reports in br_multicast

The brmulticastaddgroup function in net/bridge/brmulticast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service memory corruption and system crash by sending IGMP packets to a local interface...

PT-2011-2574 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35-rc5 Description: The issue is related to the br mdb ip get function in the Linux kernel, which allows remote attackers to cause a denial of service NULL pointer dereference and system crash via an IGMP...