Project

General

Profile

Actions
Copy link

Security #6493

closed
VJ JI

ip defrag: several issues with overlap handling

Security #6493: ip defrag: several issues with overlap handling

Added by Victor Julien over 2 years ago. Updated 9 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
8.0.0-beta1
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
MODERATE
Disclosure Date:
02/06/2024

Description

Tracking issue for report highlighting several issues in ip-defrag. Please create sub-tickets for the individual issues.

Severity TBD at this point.

Subtasks 9 (0 open — 9 closed)

Security #6668: ip defrag: final overlapping packet can lead to "hole" in re-assembled dataClosedJason IshActions
Security #6671: ip defrag: final overlapping packet can lead to "hole" in re-assembled data (6.0.x backport)ClosedJason IshActions
Security #6673: ip defrag: final overlapping packet can lead to "hole" in re-assembled data (7.0.x backport)ClosedJason IshActions
Security #6669: ip defrag: re-assembly error in bsd policyClosedJason IshActions
Security #6670: ip defrag: re-assembly error in bsd policy (6.0.x backport)ClosedJason IshActions
Security #6672: ip defrag: re-assembly error in bsd policy (7.0.x backport)ClosedJason IshActions
Security #6675: ip-defrag: packet can be considered complete even with holesClosedJason IshActions
Security #6676: ip-defrag: packet can be considered complete even with holes (6.0.x backport)ClosedJason IshActions
Security #6677: ip-defrag: packet can be considered complete even with holes (7.0.x backport)ClosedJason IshActions

OT Updated by OISF Ticketbot over 2 years ago Actions
Copy link
 #1

  • Subtask #6494 added

OT Updated by OISF Ticketbot over 2 years ago Actions
Copy link
 #2

  • Label deleted (Needs backport to 6.0)

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #3

  • Target version changed from 7.0.3 to 8.0.0-beta1
  • Label Needs backport to 7.0 added

OT Updated by OISF Ticketbot over 2 years ago Actions
Copy link
 #4

  • Subtask #6518 added

OT Updated by OISF Ticketbot over 2 years ago Actions
Copy link
 #5

  • Label deleted (Needs backport to 7.0)

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
 #6

  • Disclosure Date set to 02/06/2024

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
 #7

Severity MODERATE as it depends on host-os-policy that most ppl don't touch. Setups using AF_PACKET generally use defrag handling by the Linux kernel.

JI Updated by Jason Ish about 2 years ago Actions
Copy link
 #8

  • Subtask #6668 added

JI Updated by Jason Ish about 2 years ago Actions
Copy link
 #9

  • Subtask #6669 added

JI Updated by Jason Ish about 2 years ago Actions
Copy link
 #10

  • Subtask #6675 added

JI Updated by Jason Ish almost 2 years ago Actions
Copy link
 #11

  • Subtask deleted (#6518)

JI Updated by Jason Ish almost 2 years ago Actions
Copy link
 #12

  • Subtask deleted (#6494)

JI Updated by Jason Ish over 1 year ago Actions
Copy link
 #13

  • Status changed from Assigned to Closed

Closing, all sub-tasks completed. New issues can get a new ticket.

JF Updated by Juliana Fajardini Reichow 9 months ago Actions
Copy link
 #14

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom