oss-sec mailing list archives

Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500


From: Eugene Teo <eugeneteo () kernel sg>
Date: Thu, 15 Oct 2009 15:36:33 +0800

Eugene Teo wrote:
Eugene Teo wrote:
Executing ping -f -s 3000 IP in a certain network setup could trigger an out-of-IOMMU error, leading to a denial of service.

FYI, I rated this cvss2=8.3/AV:A/AC:L/Au:N/C:C/I:C/A:C.

Correction: 6.1/AV:A/AC:L/Au:N/C:N/I:N/A:C.

Thanks, Eugene


Current thread: