Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

Linux Kernel Fragment Reassembly Remote Denial Of Service Vulnerability

Solution:
Red Hat has released advisory RHSA-2003:187-01 and fixes to address this issue. See referenced advisory for fix details.

Debian has issued a kernel upgrade that is patched. Please see the advisories linked to in the reference section (DSA-311-1 and DSA 312-1) for URLs to fixes.

Red Hat Linux has released a new advisory RHSA-2003:195-06. Fixes are available through the Red Hat Network. Affected users are advised to upgrade.

Debian has released a new advisory DSA 332-1. Information about obtaining and applying fixes can be found in the referenced advisory.

Debian has announced in DSA 336-2 that advisory DSA 336-1 does not address this issue.

Conectiva has released advisory CLA-2003:701 to address this issue. See referenced advisory for additional details and fix information.

Red Hat has released an advisory (RHSA-2003:198-16) containing updated IA64 fixes for Red Hat Enterprise Linux AS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor. These fixes are only available through the Red Hat Network which can be found at http://rhn.redhat.com/.

Conectiva has released a security advisory (CLSA-2003:730) containing fixes to address this issue in CLEE 1.0. Users are advised to upgrade as soon as possible.

RHBA-2003:263-05 (for non-Enterprise Red Hat distributions) has been released to address unrelated bugs but provides Kernel updates that include more recent fixes for this and other security vulnerabilities.

Conectiva has released a security advisory (CLA-2003:796) containing fixes to address this issue in Conectiva Linux 8.

Debian has released DSA 442-1 to provide fixes for s390 platforms. Please see the attached advisory for further information.

RedHat kernel-2.4.18-3.i686.rpm

Red Hat kernel-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-20.7.i686.rpm

RedHat kernel-2.4.2-2.i386.rpm

Red Hat kernel-2.4.20-20.7.athlon.rpm
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

Red Hat kernel-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-20.7.i386.rpm

RedHat kernel-source-2.4.18-14.i386.rpm

Red Hat kernel-source-2.4.20-20.8.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/kernel-source-2.4.20-20.8.i386 .rpm

RedHat kernel-bigmem-2.4.18-14.i686.rpm

Red Hat kernel-bigmem-2.4.20-20.8.i686.rpm
ftp://updates.redhat.com/8.0/en/os/i686/kernel-bigmem-2.4.20-20.8.i686 .rpm

RedHat kernel-BOOT-2.4.7-10.i386.rpm

Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.2-2.i386.rpm

Red Hat kernel-doc-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-2.4.20-8.athlon.rpm

Red Hat kernel-2.4.20-20.9.athlon.rpm
ftp://updates.redhat.com/9/en/os/athlon/kernel-2.4.20-20.9.athlon.rpm

RedHat kernel-source-2.4.2-2.i386.rpm

Red Hat kernel-source-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.7-10.athlon.rpm

Red Hat kernel-2.4.20-20.7.athlon.rpm
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-doc-2.4.18-3.i386.rpm

Red Hat kernel-doc-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-BOOT-2.4.20-8.i386.rpm

Red Hat kernel-BOOT-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-BOOT-2.4.20-20.9.i386.rpm

RedHat kernel-2.4.20-8.i586.rpm

Red Hat kernel-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-2.4.20-20.9.i386.rpm

Red Hat kernel-2.4.20-20.9.i586.rpm
ftp://updates.redhat.com/9/en/os/i586/kernel-2.4.20-20.9.i586.rpm

RedHat kernel-2.4.7-10.i686.rpm

Red Hat kernel-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-20.7.i686.rpm

Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-bigmem-2.4.20-8.i686.rpm

Red Hat kernel-bigmem-2.4.20-20.9.i686.rpm
ftp://updates.redhat.com/9/en/os/i686/kernel-bigmem-2.4.20-20.9.i686.r pm

RedHat kernel-source-2.4.20-8.i386.rpm

Red Hat kernel-source-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-source-2.4.20-20.9.i386.r pm

RedHat kernel-2.4.20-8.i686.rpm

Red Hat kernel-2.4.20-20.9.i686.rpm
ftp://updates.redhat.com/9/en/os/i686/kernel-2.4.20-20.9.i686.rpm

RedHat kernel-BOOT-2.4.18-3.i386.rpm

Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.18-14.i386.rpm

Red Hat kernel-doc-2.4.20-20.8.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/kernel-doc-2.4.20-20.8.i386.rp m

RedHat kernel-BOOT-2.4.2-2.i386.rpm

Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-2.4.7-10.i386.rpm

Red Hat kernel-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-20.7.i386.rpm

Red Hat kernel-2.4.20-20.7.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-2.4.18-3.athlon.rpm

Red Hat kernel-2.4.20-20.7.athlon.rpm
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-2.4.18-3.i386.rpm

Red Hat kernel-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-20.7.i386.rpm

Red Hat kernel-2.4.20-20.7.i586.rpm
ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-bigmem-2.4.18-3.i686.rpm

Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-source-2.4.7-10.i386.rpm

Red Hat kernel-source-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.18-14.i586.rpm

Red Hat kernel-2.4.20-20.8.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/kernel-2.4.20-20.8.i386.rpm

Red Hat kernel-2.4.20-20.8.i586.rpm
ftp://updates.redhat.com/8.0/en/os/i586/kernel-2.4.20-20.8.i586.rpm

RedHat kernel-2.4.18-14.i686.rpm

Red Hat kernel-2.4.20-20.8.i686.rpm
ftp://updates.redhat.com/8.0/en/os/i686/kernel-2.4.20-20.8.i686.rpm

RedHat kernel-doc-2.4.20-8.i386.rpm

Red Hat kernel-doc-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-doc-2.4.20-20.9.i386.rpm

Linux kernel 2.4.17

Debian kernel-headers-2.4.17_2.4.17-2.woody.3_s390.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.17-s39 0/kernel-headers-2.4.17_2.4.17-2.woody.3_s390.deb

Debian kernel-image-2.4.17-s390_2.4.17-2.woody.3_s390.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.17-s39 0/kernel-image-2.4.17-s390_2.4.17-2.woody.3_s390.deb

Debian kernel-patch-2.4.17-s390_0.0.20020816-0.woody.2_all.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-s39 0/kernel-patch-2.4.17-s390_0.0.20020816-0.woody.2_all.deb

Linux kernel 2.4.18 x86

Debian kernel-doc-2.4.18_2.4.18-9_all.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-doc-2.4.18_2.4.18-9_all.deb

Debian kernel-headers-2.4.18-1-386_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-386_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1-586tsc_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-586tsc_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1-686-smp_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686-smp_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1-686_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1-k6_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k6_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1-k7_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k7_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-1_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1_2.4.18-8_i386.deb

Debian kernel-headers-2.4.18-bf2.4_2.4.18-5woody1_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-headers-2.4.18-bf2.4_2.4.18-5woody1_i386.deb

Debian kernel-image-2.4.18-1-386_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-386_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-1-586tsc_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-586tsc_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-1-686-smp_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686-smp_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-1-686_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-1-k6_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k6_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-1-k7_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k7_2.4.18-8_i386.deb

Debian kernel-image-2.4.18-bf2.4_2.4.18-5woody1_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-image-2.4.18-bf2.4_2.4.18-5woody1_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-386_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-386_2.4.18-8_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-8_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-8_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-686_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686_2.4.18-8_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-8_i386.deb

Debian kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-8_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-8_i386.deb

Debian kernel-source-2.4.18_2.4.18-9_all.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-source-2.4.18_2.4.18-9_all.deb

Debian pcmcia-modules-2.4.18-bf2.4_3.1.33-6woody1k5woody1_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/p/pcmcia-cs/pcmcia-module s-2.4.18-bf2.4_3.1.33-6woody1k5woody1_i386.deb

Linux kernel 2.4.19

Conectiva devfsd-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/devfsd-2.4.19-1U80_20cl.i38 6.rpm

Conectiva k_athlon-2.4.19-340.i586.rpm
ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_athlon-2.4.19-340.i5 86.rpm

Conectiva k_debug-2.4.19-340.i586.rpm
ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_debug-2.4.19-340.i58 6.rpm

Conectiva k_deflt-2.4.19-340.i586.rpm
ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_deflt-2.4.19-340.i58 6.rpm

Conectiva k_psmp-2.4.19-340.i586.rpm
ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_psmp-2.4.19-340.i586 .rpm

Conectiva k_smp-2.4.19-340.i586.rpm
ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_smp-2.4.19-340.i586. rpm

Conectiva kernel-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i38 6.rpm

Conectiva kernel-2.4.19-1U80_20cl.i586.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i58 6.rpm

Conectiva kernel-2.4.19-1U80_20cl.i686.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i68 6.rpm

Conectiva kernel-BOOT-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-BOOT-2.4.19-1U80_20c l.i386.rpm

Conectiva kernel-doc-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-doc-2.4.19-1U80_20cl .i386.rpm

Conectiva kernel-enterprise-2.4.19-1U80_20cl.i686.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-enterprise-2.4.19-1U 80_20cl.i686.rpm

Conectiva kernel-headers-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-headers-2.4.19-1U80_ 20cl.i386.rpm

Conectiva kernel-rbc-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-rbc-2.4.19-1U80_20cl .i386.rpm

Conectiva kernel-smp-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i386.rpm

Conectiva kernel-smp-2.4.19-1U80_20cl.i586.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i586.rpm

Conectiva kernel-smp-2.4.19-1U80_20cl.i686.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i686.rpm

Conectiva kernel-source-2.4.19-1U80_20cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-source-2.4.19-1U80_2 0cl.i386.rpm