oss-sec mailing list archives

Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries

From: Moritz Muehlenhoff <jmm () debian org>
Date: Tue, 10 Jan 2012 18:23:36 +0100


On Tue, Jan 10, 2012 at 08:58:07AM -0700, Kurt Seifried wrote:

On 01/10/2012 12:34 AM, Eugene Teo wrote:

Commit 5b7c84066733c5dfb0e4016d939757b38de189e4 ('ipv4: correct IGMP
behavior on v3 query during v2-compatibility mode') added yet another
case for query parsing, which can result in max_delay = 0.  Substitute
a value of 1, as in the usual v3 case.

Reported-by: Simon McVittie <smcv <at> debian.org>
References: http://bugs.debian.org/654876
Signed-off-by: Ben Hutchings <ben <at> decadent.org.uk>

http://article.gmane.org/gmane.linux.network/217256

Introduced in 5b7c8406 2.6.36-rc8

Thanks, Eugene

Debian appears to have assigned CVE-2012-0207 to this issue, is that
correct?


Yes, it's also in the Subject of Eugene's mail :-)

Cheers,
        Moritz

Current thread:

CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries Eugene Teo (Jan 09)
- Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries Kurt Seifried (Jan 10)
  - Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries Moritz Muehlenhoff (Jan 10)
    - Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries Kurt Seifried (Jan 10)
- Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries Eugene Teo (Jan 17)