Project

General

Profile

Actions
Copy link

Security #6675

closed
JI JI

Security #6493: ip defrag: several issues with overlap handling

ip-defrag: packet can be considered complete even with holes

Security #6675: ip-defrag: packet can be considered complete even with holes

Added by Jason Ish about 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
8.0.0-beta1
Affected Versions:
6.0.15, 7.0.2
Label:
CVE:
2024-32867
Git IDs:

d226d0a3fce8837936e1bdfaee496c80d417e0a5

Severity:
MODERATE
Disclosure Date:

Description

The test to check if all fragments exist is flawed. It adds up the data lengths, which can cause it to be larger than the data available in case of fragments.

To fix, the length of the re-assembled packet should only be incremented to the last byte of data seen.

This is covered by test peose/bsd/173

Subtasks 2 (0 open — 2 closed)

Security #6676: ip-defrag: packet can be considered complete even with holes (6.0.x backport)ClosedJason IshActions
Security #6677: ip-defrag: packet can be considered complete even with holes (7.0.x backport)ClosedJason IshActions

OT Updated by OISF Ticketbot about 2 years ago Actions
Copy link
 #1

  • Subtask #6676 added

OT Updated by OISF Ticketbot about 2 years ago Actions
Copy link
 #2

  • Label deleted (Needs backport to 6.0)

OT Updated by OISF Ticketbot about 2 years ago Actions
Copy link
 #3

  • Subtask #6677 added

OT Updated by OISF Ticketbot about 2 years ago Actions
Copy link
 #4

  • Label deleted (Needs backport to 7.0)

JI Updated by Jason Ish about 2 years ago Actions
Copy link
 #5

  • Status changed from Assigned to In Review

JI Updated by Jason Ish about 2 years ago Actions
Copy link
 #6

  • Description updated (diff)

VJ Updated by Victor Julien almost 2 years ago Actions
Copy link
 #7

  • CVE set to 2024-32867

VJ Updated by Victor Julien almost 2 years ago Actions
Copy link
 #8

  • Status changed from In Review to Closed
  • Git IDs updated (diff)
Actions
Copy link

Also available in: PDF Atom