Description
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7). This product enables net.ipv4.conf.all.log_martians by default. NOTE: the vendor reports "It has been proved that this vulnerability has no foundation and it is totally fake and based on false assumptions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.exploitalert.com/view-details.html?id=26361 ↗
- https://backbox.org/portal/blog/false-cve-backbox-46-unmasked ↗
- https://cxsecurity.com/issue/WLB-2017040001 ↗
- https://forum.backbox.org/security-advisories/waiting-verification-backbox-os-denial-of-service/msg10218 ↗
- https://www.exploit-db.com/exploits/41781/ ↗