Re: security problem in ESP fragment handling?

[Mark J Cox <mjc () redhat com>]

> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=920fc941a9617f95ccb283037fe6f8a38d95bb69
>
> This will at least hang the networking of the system if triggered.
>
>
> According to Karsten Keil just ESP fragment packets need to be accepted
> by the kernel to trigger the condition.
> We think this might be true for all 2.6 kernels (ever since esp.c got added).

Quick response (burried today) but I think this is already allocated 
CVE-2007-6282

http://64.233.183.104/search?q=cache:NNop-SbiE4EJ:www.mail-archive.com/netdev%40vger.kernel.org/msg62480.html+CVE-2007-6282&hl=en&ct=clnk&cd=1

Mark