oss-security - CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LFD.2.10.1401281857490.9872@wniryva.cad.erqung.pbz>
Date: Tue, 28 Jan 2014 19:00:06 +0530 (IST)
From: P J P <ppandit@...hat.com>
To: oss security list <oss-security@...ts.openwall.com>
Subject: CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized
 buffer in IRC NAT helper 

    Hello,

Linux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)
support for IRC protocol(NF_NAT_IRC), is vulnerable to an information leakage
flaw. It could occur when communicating over direct client-to-client IRC
connection(/dcc) via a NAT-ed network. Kernel attempts to mangle IRC TCP
packet's content, wherein an uninitialised 'buffer' object is copied to a
socket buffer and sent over to the other end of a connection.

Upstream fix:
-------------
   -> https://git.kernel.org/linus/2690d97ade05c5325cbf7c72b94b90d265659886

Reference:
----------
   -> https://bugzilla.redhat.com/show_bug.cgi?id=1058748

Thank you
--
Prasad J Pandit / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.