CVE

Id
33803  
CVE No.
CVE-2008-3686  
Status
Candidate  
Description
The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference.  
Phase
Assigned (20080814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368649 33803 CVE-2008-3686 MLIST:[linux-kernel] 20080807 OOPS, ip -f inet6 route get fec0::1, linux-2.6.26, ip6_route_output, rt6_fill_node+0x175  View
368650 33803 CVE-2008-3686 URL:http://lkml.org/lkml/2008/8/7/230  View
368651 33803 CVE-2008-3686 MLIST:[linux-kernel] 20080808 Re: OOPS, ip -f inet6 route get fec0::1, linux-2.6.26, ip6_route_output, rt6_fill_node+0x175  View
368652 33803 CVE-2008-3686 URL:http://lkml.org/lkml/2008/8/8/7  View
368653 33803 CVE-2008-3686 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5e0115e500fe9dd2ca11e6f92db9123204f1327a  View
368654 33803 CVE-2008-3686 VUPEN:ADV-2008-2422  View
368655 33803 CVE-2008-3686 URL:http://www.vupen.com/english/advisories/2008/2422  View
368656 33803 CVE-2008-3686 SECUNIA:31579  View
368657 33803 CVE-2008-3686 URL:http://secunia.com/advisories/31579  View
368658 33803 CVE-2008-3686 XF:linux-kernel-rt6fillnode-dos(44605)  View

Related JVN