BackBox Linux Denial of Service Vulnerability

BackBox is a Linux distribution based on Ubuntu, an operating system for network penetration testing and security assessment. A denial of service vulnerability exists in BackBox Linux version 4.6 that allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a large numbe...

CVE-2017-7397

CVE-2017-7397 relates to BackBox Linux 4.6, where a denial-of-service is possible via a flood of packets with Martian source IPs (RFC 1812 5.3.7). The issue arises with net.ipv4.conf.all.log_martians enabled by default, potentially causing ksoftirqd CPU consumption. Connected documents corroborat...

CVE-2017-7397: Uncontrolled Resource Consumption

BackBox Linux 4.6 allows remote attackers to cause a denial of service ksoftirqd CPU consumption via a flood of packets with Martian source IP addresses as defined in RFC 1812 section 5.3.7. This product enables net.ipv4.conf.all.logmartians by default. NOTE: the vendor reports "It has been prove...