[kernel-sec-discuss] r1003 - active

[jmm at alioth.debian.org]

Author: jmm
Date: 2007-10-23 07:52:56 +0000 (Tue, 23 Oct 2007)
New Revision: 1003

Added:
   active/CVE-2007-4997
Log:
new kernel issue


Added: active/CVE-2007-4997
===================================================================
--- active/CVE-2007-4997	                        (rev 0)
+++ active/CVE-2007-4997	2007-10-23 07:52:56 UTC (rev 1003)
@@ -0,0 +1,21 @@
+Candidate: CVE-2007-4997
+References: 
+Description: 
+Ubuntu-Description: 
+Notes: 
+ > The summary is that an evil 80211 frame can crash out a victim's
+ > machine. It only applies to drivers using the 80211 wireless code, and
+ > only then to certain drivers (and even then depends on a card's
+ > firmware not dropping a dubious packet). I must confess I'm not
+ > keeping track of Linux wireless support, and the different protocol
+ > stacks etc.
+ jmm> 04045f98e0457aba7d4e6736f37eed189c48a5f7
+Bugs: 
+upstream: pending (2.6.24)
+linux-2.6: needed
+2.6.18-etch-security: 
+2.6.8-sarge-security: N/A
+2.4.27-sarge-security: N/A
+2.6.15-dapper-security: 
+2.6.17-edgy-security: 
+2.6.20-feisty-security: