[kernel-sec-discuss] r1076 - active

[jmm at alioth.debian.org]

Author: jmm
Date: 2007-12-29 14:42:13 +0000 (Sat, 29 Dec 2007)
New Revision: 1076

Modified:
   active/CVE-2007-6151
Log:
flesh out details for isdn issue


Modified: active/CVE-2007-6151
===================================================================
--- active/CVE-2007-6151	2007-12-27 17:57:11 UTC (rev 1075)
+++ active/CVE-2007-6151	2007-12-29 14:42:13 UTC (rev 1076)
@@ -1,6 +1,10 @@
 Candidate: CVE-2007-6151
 References:
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a
 Description:
+ The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows
+ local users to cause a denial of service via a struct in which iocts is
+ not null terminated, which triggers a buffer overflow.
 Ubuntu-Description: 
 Notes: 
 Bugs: