oss-security - Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4AD6D101.70001@kernel.sg>
Date: Thu, 15 Oct 2009 15:36:33 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>, Willy Tarreau <w@....eu>
Subject: Re: CVE request kernel: flood ping cause out-of-iommu
 error and panic when mtu larger than 1500

Eugene Teo wrote:
> Eugene Teo wrote:
>> Executing ping -f -s 3000 IP in a certain network setup could trigger 
>> an out-of-IOMMU error, leading to a denial of service.
> 
> FYI, I rated this cvss2=8.3/AV:A/AC:L/Au:N/C:C/I:C/A:C.

Correction: 6.1/AV:A/AC:L/Au:N/C:N/I:N/A:C.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.