CVE-2008-2750

Priority
Description
The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel
2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service
(kernel heap memory corruption and system crash) and possibly have
unspecified other impact via a crafted PPPOL2TP packet that results in a
large value for a certain length variable.
Ubuntu-Description
The PPP over L2TP routines in the kernel did not correctly handle
certain messages. A remote attacker could send a specially crafted
packet that could crash the system or execute arbitrary code.
Assigned-to
kees
Notes
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (2.6.26~rc6)
Patches:
Upstream:6b6707a50c7598a83820077393f8823ab791abf8
Package
Upstream:not-affected (code does not exist)
Package
Upstream:not-affected (code does not exist)
Package
Upstream:not-affected (code does not exist)
More Information

Updated: 2019-12-05 20:49:29 UTC (commit 0aa5e7c87c8b55d2ec5c7f4ca1179cf75de91961)