Description
The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2006-0140.html ↗
- http://secunia.com/advisories/18684 ↗
- http://secunia.com/advisories/18056 ↗
- http://secunia.com/advisories/18977 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142 ↗
- http://secunia.com/advisories/18059 ↗
- http://secunia.com/advisories/19185 ↗
- http://secunia.com/advisories/19607 ↗
- http://www.securityfocus.com/archive/1/419522/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/428058/100/0/threaded ↗
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 ↗
- http://www.debian.org/security/2005/dsa-922 ↗
- https://usn.ubuntu.com/219-1/ ↗
- http://www.redhat.com/support/errata/RHSA-2006-0190.html ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 ↗
- http://www.securityfocus.com/archive/1/428028/100/0/threaded ↗
- http://www.debian.org/security/2005/dsa-921 ↗
- http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA ↗
- http://www.securityfocus.com/bid/15531 ↗
- http://secunia.com/advisories/17826 ↗
- http://secunia.com/advisories/17918 ↗
- http://www.securityfocus.com/archive/1/427980/100/0/threaded ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0191.html ↗
- http://secunia.com/advisories/18562 ↗