[kernel] r4935 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Wed Nov 30 09:49:04 2005
New Revision: 4935

Added:
   patch-tracking/CVE-2005-3806
Log:
dos vulnerability in ipv6 flow label code


Added: patch-tracking/CVE-2005-3806
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2005-3806	Wed Nov 30 09:49:04 2005
@@ -0,0 +1,25 @@
+Candidate: CVE-2005-3806
+References: 
+ http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d
+ http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=bbbe80cdaf72a75a463aff9551e60b31e2f69061;hp=f841bde30c18493a94fd5d522b84724a8eb82a4a;hb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d;f=net/ipv6/ip6_flowlabel.c
+
+Description: 
+ The IPv6 flowlabel handling code (ip6_flowlabel.c) in Linux kernels
+ 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in
+ certain circumstances, which allows local users to corrupt kernel memory
+ or cause a denial of service (crash) by triggering a free of non-allocated
+ memory.
+
+Notes: 
+Bugs: 
+upstream: 
+2.6.14: 
+2.6.8-sarge-security: 
+2.4.27-sarge-security: 
+2.6.8: 
+2.4.19-woody-security: 
+2.4.18-woody-security: 
+2.4.17-woody-security: 
+2.4.16-woody-security: 
+2.4.17-woody-security-hppa: 
+2.4.17-woody-security-ia64: