Linux Kernel IPv6 Netfilter Connection Tracking Vulnerability

Last Update Date: 13 Jul 2012 Release Date: 12 Jul 2012 4470 Views

RISK: High Risk

TYPE: Operating Systems - Linux

A vulnerability has been identified in the Linux Kernel. A remote user can send specially crafted packets to trigger a null pointer dereference in nf_ct_frag6_reasm() and cause the target system to crash.

Systems using IPv6 and also having the nf_conntrack_ipv6 kernel module loaded are affected.

Impact

Denial of Service

System / Technologies affected

Version 2.6.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a source code fix, available at:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9e2dcf72023d1447f09c47d77c99b0c49659e5ceUpdate to version 2.0.2.

Vulnerability Identifier

CVE-2012-2744

Source

SecurityTracker