Displaying 1 result from an estimated 1 matches for "mbuilov".
2011 Aug 21
6
[Bug 738] New: reading beyond buffer limits in nf_conntrack_proto_tcp.c::tcp_options()
...Product: netfilter/iptables
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: minor
Priority: P2
Component: nf_conntrack
AssignedTo: netfilter-buglog at lists.netfilter.org
ReportedBy: mbuilov at gmail.com
Estimated Hours: 0.0
Incorrect handling of invalid TCP option with too big opsize may lead to read
access beyond tcp-packet or buffer allocated on stack.
in net/netfilter/nf_conntrack_proto_tcp.c:
397 while (length > 0) {
398 int opcode=*ptr++;
399 int...