| commit | 408ed10553e708166cdee751cf0e1babc602ee17 | |
| author | Chas Williams <chas@cmf.nrl.navy.mil> | |
| Thu, 4 Dec 2008 22:58:13 +0000 (4 14:58 -0800) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Sat, 13 Dec 2008 23:29:17 +0000 (13 15:29 -0800) | ||
| tree | 91062f69bc812e32a01e90119cc38d27b9d7d7cd | treesnapshot (tar.gz zip) |
| parent | 2eb6821ec73274ceff92174175d4b373aa3e28b1 | commitdiff |
ATM: CVE-2008-5079: duplicate listen() on socket corrupts the vcc table
commit 17b24b3c97498935a2ef9777370b1151dfed3f6f upstream.
As reported by Hugo Dias that it is possible to cause a local denial
of service attack by calling the svc_listen function twice on the same
socket and reading /proc/net/atm/*vc
Signed-off-by: Chas Williams <chas@cmf.nrl.navy.mil>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit 17b24b3c97498935a2ef9777370b1151dfed3f6f upstream.
As reported by Hugo Dias that it is possible to cause a local denial
of service attack by calling the svc_listen function twice on the same
socket and reading /proc/net/atm/*vc
Signed-off-by: Chas Williams <chas@cmf.nrl.navy.mil>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| net/atm/svc.c | diffblobblamehistory |