[kernel] r6870 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Thu Jun 22 18:40:00 2006
New Revision: 6870

Modified:
   patch-tracking/CVE-2006-2444

Log:
checked SNMP NAT netfilter issue


Modified: patch-tracking/CVE-2006-2444
==============================================================================
--- patch-tracking/CVE-2006-2444	(original)
+++ patch-tracking/CVE-2006-2444	Thu Jun 22 18:40:00 2006
@@ -1,16 +1,16 @@
 Candidate: CVE-2006-2444
 References: 
-Description: SNMP NAT remote DoS
+ http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18
+ http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=1db6b5a66e93ff125ab871d6b3f7363412cc87e8
+Description:
+ The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows
+ remote attackers to cause a denial of service (crash) via unspecified remote attack vectors 
+ that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of
+ previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as
+ demonstrated via certain test cases of the PROTOS SNMP test suite.
 Notes: 
 Bugs: 
 upstream: released (2.6.16.18)
 linux-2.6: released (2.6.16-15)
-2.6.8-sarge-security: 
-2.4.27-sarge-security: 
-2.4.27:
-2.4.19-woody-security: 
-2.4.18-woody-security: 
-2.4.17-woody-security: 
-2.4.16-woody-security: 
-2.4.17-woody-security-hppa: 
-2.4.17-woody-security-ia64: 
+2.6.8-sarge-security: needed
+2.4.27-sarge-security: needed