CVE-2006-4623 Information

Description

The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.

Reference

http://lkml.org/lkml/2006/8/20/278 http://secunia.com/advisories/21820 http://secunia.com/advisories/22292 http://secunia.com/advisories/22382 http://secunia.com/advisories/22441 http://secunia.com/advisories/22945 http://secunia.com/advisories/23474 http://secunia.com/advisories/25691 http://secunia.com/advisories/25714 http://secunia.com/advisories/26139 http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm http://www.debian.org/security/2007/dsa-1304 http://www.mandriva.com/security/advisories?name=MDKSA-2006:182 http://www.novell.com/linux/security/advisories/2006_79_kernel.html http://www.redhat.com/support/errata/RHSA-2006-0689.html http://www.securityfocus.com/archive/1/448998/100/0/threaded http://www.securityfocus.com/archive/1/471457 http://www.securityfocus.com/bid/19939 http://www.ubuntu.com/usn/usn-489-1 http://www.vupen.com/english/advisories/2006/3551 https://issues.rpath.com/browse/RPL-721 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A9775