Debians sikkerhedsbulletin

DSA-492-1 iproute -- lammelsesangreb

Rapporteret den:
18. apr 2004
Berørte pakker:
iproute
Sårbar:
Ja
Referencer i sikkerhedsdatabaser:
I Debians fejlsporingssystem: Fejl 242994.
I Bugtraq-databasen (hos SecurityFocus): BugTraq-id 9092.
I Mitres CVE-ordbog: CVE-2003-0856.
Yderligere oplysninger:

Herbert Xu rapporterer at lokale brugere kunne forårsage et lammelsesangreb mod iproute, et sæt værktøjer til netværkskontrol i Linux-kerner. iproute anvender netlink-grænsefladen til at kommunikere med kernen, men fik ikke kontrolleret om modtagne meddelelser kom fra kernen (fremfor andre bruger-processer).

I den nuværende stabile distribution (woody) er dette problem rettet i version 20010824-8woody1.

I den ustabile distribution (sid), vil dette problem snart blive rettet.

Vi anbefaler at du opdaterer din iproute-pakke.

Rettet i:

Debian GNU/Linux 3.0 (woody)

Kildekode:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1.dsc
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1.diff.gz
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824.orig.tar.gz
Alpha:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_alpha.deb
ARM:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_arm.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_ia64.deb
HPPA:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_hppa.deb
Motorola 680x0:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_m68k.deb
Big endian MIPS:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_mips.deb
Little endian MIPS:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_mipsel.deb
PowerPC:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/i/iproute/iproute_20010824-8woody1_sparc.deb

MD5-kontrolsummer for de listede filer findes i den originale sikkerhedsbulletin.