DSA-4272: -1 linux -- security update
Juha-Matti Tilli discovered a flaw in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker can take advantage of this flaw to trigger time and calculation expensive fragment reassembly algorithms by sending specially crafted packets, leading to remote denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can exploit it by sending specially crafted fragmented IPv4 or IPv6 packets to an affected system. No local access is described as necessary.
What is the practical impact?
The issue can cause the kernel to spend excessive time and computation on fragment reassembly, resulting in a remote denial of service.
How can I tell whether a system may be exposed?
Systems running the affected Debian Linux kernel are potentially exposed if they can receive fragmented IPv4 or IPv6 packets from an attacker. The provided information does not identify specific affected or fixed package versions.