Bug 523986
Summary: | kernel: ipt_recent: sanity check hit count [mrg-1] | ||
---|---|---|---|
Product: | Red Hat Enterprise MRG | Reporter: | Eugene Teo (Security Response) <eteo> |
Component: | realtime-kernel | Assignee: | Luis Claudio R. Goncalves <lgoncalv> |
Status: | CLOSED ERRATA | QA Contact: | David Sommerseth <davids> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | Development | CC: | bhu, lgoncalv, ovasik, williams |
Target Milestone: | 1.1.9 | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | 523982 | Environment: | |
Last Closed: | 2009-11-03 18:22:05 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 523982 | ||
Bug Blocks: |
Description
Eugene Teo (Security Response)
2009-09-17 13:51:59 UTC
Patch bz523986-ipt_recent-sanity-check-hit-count.patch, backport of commit d0ebf133590abdc035af6e19a6568667af0ab3b0 from Linus' tree, was added to kernel's -135 queue. Verified by running reproducing routine. On 2.6.24.7-132 the following iptables command was allowed: iptables -A OUTPUT -p udp --dport 1234 -m recent --update --seconds 60 --hitcount 21 --name test --rsource -j DROP On 2.6.24.7-136 the same command failed: (64bit kernel) [root@hp-dl585g2-01 ~]# iptables -A OUTPUT -p udp --dport 1234 -m recent --update --seconds 60 --hitcount 21 --name test --rsource -j DROP iptables: Unknown error 18446744073709551615 (32bit kernel) [root@intel-greencity-01 ~]# iptables -A OUTPUT -p udp --dport 1234 -m recent --update --seconds 60 --hitcount 21 --name test --rsource -j DROP iptables: Unknown error 4294967295 An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2009-1540.html |