Description
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +6 | 2.6.9-22.0.2.EL | RHSA-2006:0101 |
| RHEL 3 | kernel +8 | 2.4.21-37.0.1.EL | RHSA-2006:0140 |
Advisories 2
- RHSA-2006:0140 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0101 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2006:0140 vendor-advisory
- 18684 third-party-advisory
- igmp-spoofed-report-dos(9436) vdb-entry
- oval:org.mitre.oval:def:10736 vdb-entry signature
- RHSA-2006:0101 vendor-advisory
- FLSA:157459-2 vendor-advisory
- FLSA:157459-4 vendor-advisory
- 5020 vdb-entry
- 20020614 IGMP denial of service vulnerability mailing-list
- RHSA-2006:0190 vendor-advisory
- 18510 third-party-advisory
- FLSA:157459-1 vendor-advisory
- http://www.cs.ucsb.edu/~krishna/igmp_dos/
- FLSA:157459-3 vendor-advisory
- RHSA-2006:0191 vendor-advisory
- 18562 third-party-advisory