Description
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.
References
- icmp-read-memory(7998) vdb-entry
- 5394 vdb-entry
- RHSA-2002:007 vendor-advisory
- 20020120 remote memory reading through tcp/icmp mailing-list