|
Line
Link Here
|
|
* Linux kernel remote denial-of-service attack. |
|
* Linux kernel remote denial-of-service attack. |
| 1 |
* This is expected to hang all recent 2.6 kernels. Tested on 2.6.9. |
1 |
* This is expected to hang all recent 2.6 kernels. Tested on 2.6.9. |
| 2 |
* |
2 |
* |
| 3 |
* A client of pppd can remotely hang the kernel of the server machine. |
3 |
* A client of pppd can remotely hang the kernel of the server machine. |
| 4 |
* |
4 |
* |
| 5 |
* Discovered by Stephen Blackheath <stephen@blacksapphire.com> and |
5 |
* Discovered by Stephen Blackheath <stephen@blacksapphire.com> and |
| 6 |
* Ben Martel <benm@symmetric.co.nz> 11 Jan 2005. |
6 |
* Ben Martel <benm@symmetric.co.nz> 11 Jan 2005. |
| 7 |
* |
7 |
* |
| 8 |
* Copyright (C) 2005 by Ben Martel and Stephen Blackheath. |
8 |
* Copyright (C) 2005 by Ben Martel and Stephen Blackheath. |
| 9 |
* Released under the terms of the GNU General Public License. |
9 |
* Released under the terms of the GNU General Public License. |
| 10 |
* |
10 |
* |
| 11 |
* Suggested fix for kernel (against 2.6.9): |
11 |
* Suggested fix for kernel (against 2.6.9): |
| 12 |
* |
12 |
* |
| 13 |
-- drivers/net/ppp_async.c.orig Tue Jan 11 21:27:04 2005 |
13 |
++ drivers/net/ppp_async.c Tue Jan 11 21:28:24 2005 |
|
Lines 1003-1008
Link Here
|
| 1003 |
ap->xaccm[0] = val; |
1003 |
ap->xaccm[0] = val; |
| 1004 |
break; |
1004 |
break; |
| 1005 |
} |
1005 |
} |
|
|
1006 |
if (data[1] < 2) |
| 1007 |
break; |
| 1006 |
dlen -= data[1]; |
1008 |
dlen -= data[1]; |
| 1007 |
data += data[1]; |
1009 |
data += data[1]; |
| 1008 |
} |
1010 |
} |
| 1009 |
*/ |
1011 |
*/ |