Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1291655
| From | Hannes Frederic Sowa <hannes@stressinduktion.org> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: Information leak in pptp_bind |
| Date | 2015-12-14 23:50 +0100 |
| Message-ID | <qFK6m-3W4-23@gated-at.bofh.it> (permalink) |
| References | <qFyHV-4U5-59@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 14.12.2015 11:38, Dmitry Vyukov wrote: > The following program leak various uninit garbage including kernel > addresses and whatever is on kernel stack, in particular defeating > ASLR. The issue is in pptp_bind which does not verify sockaddr_len. Thanks for the report! I send out a patch soon. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread
Information leak in pptp_bind Dmitry Vyukov <dvyukov@gmail.com> - 2015-12-14 11:40 +0100 Re: Information leak in pptp_bind Hannes Frederic Sowa <hannes@stressinduktion.org> - 2015-12-14 23:50 +0100
csiph-web