National Cyber-Alert System

Vulnerability Summary for CVE-2008-2750

Overview

The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (06/23/2008)

Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 29747

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/29747

External Source: FEDORA

Name: FEDORA-2008-5893

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2629

Hyperlink:https://issues.rpath.com/browse/RPL-2629

External Source: XF

Name: linux-kernel-pppol2tprecvmsg-dos(43111)

Hyperlink:http://xforce.iss.net/xforce/xfdb/43111

External Source: UBUNTU

Name: USN-625-1

Hyperlink:http://www.ubuntu.com/usn/usn-625-1

External Source: MLIST

Name: [oss-security] 20080619 Re: query on a pppol2tp_recvmsg() fix - security relevant?

Hyperlink:http://www.openwall.com/lists/oss-security/2008/06/19/3

External Source: MANDRIVA

Name: MDVSA-2008:167

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

External Source: VUPEN

Name: ADV-2008-1854

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/1854

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207

External Source: SECTRACK

Name: 1020297

Hyperlink:http://securitytracker.com/id?1020297

External Source: SECUNIA

Name: 31202

Hyperlink:http://secunia.com/advisories/31202

External Source: SECUNIA

Name: 31107

Hyperlink:http://secunia.com/advisories/31107

External Source: SECUNIA

Name: 30920

Hyperlink:http://secunia.com/advisories/30920

External Source: SECUNIA

Name: 30901

Hyperlink:http://secunia.com/advisories/30901

External Source: SECUNIA

Name: 30719

Type: Advisory

Hyperlink:http://secunia.com/advisories/30719

External Source: SUSE

Name: SUSE-SA:2008:037

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

External Source: CONFIRM

Name: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6

Hyperlink:http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6b6707a50c7598a83820077393f8823ab791abf8

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6b6707a50c7598a83820077393f8823ab791abf8