Description
The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash.
References
- 2007-0002 vendor-advisory
- 24098 third-party-advisory
- MDKSA-2007:025 vendor-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/wtarreau/linux-2.4.git%3Ba=commitdiff%3Bh=05dca9b77f99d80cf615075624666106d5b61727
- 23609 third-party-advisory
- MDKSA-2007:012 vendor-advisory
- SUSE-SA:2007:021 vendor-advisory
- MDKSA-2007:040 vendor-advisory
- USN-416-1 vendor-advisory
- 24100 third-party-advisory
- 25226 third-party-advisory
- 23752 third-party-advisory
- 25683 third-party-advisory
- 20070615 rPSA-2007-0124-1 kernel xen mailing-list
- 21883 vdb-entry
- SUSE-SA:2007:018 vendor-advisory
- 23529 third-party-advisory
- 21835 vdb-entry
- 24547 third-party-advisory
- SUSE-SA:2007:030 vendor-advisory
- SUSE-SA:2007:035 vendor-advisory
- http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34
- 25691 third-party-advisory