Multiple BSD Vendor IP Fragment Queue Resource Exhaustion Vulnerability

Operating systems derived from BSD contain a vulnerability in the inherited TCP/IP implementation that may lead to possible denial of service conditions.

The problem is that there is no limit to how many IP fragment reassembly queues can be created. A remote attacker may be able to exhaust resources by causing the creation of a large number of reassembly queues.

NetBSD and FreeBSD are vulnerable. OpenBSD and BSDI may also be vulnerable to this attack.


 

Privacy Statement
Copyright 2010, SecurityFocus