Description
Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
References
- [oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=689337
- 46921 vdb-entry
- [netfilter-devel] 20110317 [PATCH v2] ipv4: netfilter: ipt_CLUSTERIP: fix buffer overflow mailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
- 8284 third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=961ed183a9fd080cf306c659b8736007e44065a5
- [netfilter] 20110310 [PATCH] ipv4: netfilter: ipt_CLUSTERIP: fix buffer overflow mailing-list
- [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks mailing-list
- [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks mailing-list