]> git.puffer.fish Git - mirror/frr.git/commit
projects / mirror / frr.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3d3380d) | patch
ospfd: CVE-2011-3325 part 2 (OSPF pkt type segv)
authorDenis Ovsienko <infrastation@yandex.ru>
Mon, 26 Sep 2011 09:18:02 +0000 (13:18 +0400)
committerDenis Ovsienko <infrastation@yandex.ru>
Mon, 26 Sep 2011 14:40:19 +0000 (18:40 +0400)
commit1f54cef38dab072f1054c6cfedd9ac32af14a120
tree6aceeb8772c8ba088b387d7fdcdc771899788fcetree | snapshot
parent3d3380d4fda43924171bc0866746c85634952c99commit | diff
ospfd: CVE-2011-3325 part 2 (OSPF pkt type segv)

This vulnerability (CERT-FI #514838) was reported by CROSS project.

The error is reproducible only when ospfd debugging is enabled:
  * debug ospf packet all
  * debug ospf zebra
When incoming packet header type field is set to 0x0a, ospfd will crash.

* ospf_packet.c
  * ospf_verify_header(): add type field check
  * ospf_read(): perform input checks early
ospfd/ospf_packet.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.