CVE-2008-2750

Priority
Medium
Description
The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel
2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service
(kernel heap memory corruption and system crash) and possibly have
unspecified other impact via a crafted PPPOL2TP packet that results in a
large value for a certain length variable.
Ubuntu-Description
The PPP over L2TP routines in the kernel did not correctly handle
certain messages. A remote attacker could send a specially crafted
packet that could crash the system or execute arbitrary code.
References
Assigned-to
kees
Package
Upstream:not-affected (code does not exist)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Package
Upstream:not-affected (code does not exist)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Package
Upstream:not-affected (code does not exist)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released
Ubuntu 8.04 LTS (Hardy Heron):released (2.6.24-19.36)
Patches:
Upstream:6b6707a50c7598a83820077393f8823ab791abf8
More Information

Valid XHTML 1.0 Strict

Updated: 2012-06-01 15:18:52 UTC (commit 5347)