Bug#532376: r8169: network buffer overflow

2009-06-08 Thread Thijs Kinkhorst
On tiisdei 9 Juny 2009, Ben Hutchings wrote: > Package: linux-2.6 > Version: 2.6.29-5 > Severity: critical > Tags: security patch > > Some or all NICs supported by r8169 seem to ignore the buffer sizes in > RX descriptors, and will write up to the global maximum frame size. > This means a remote at

Bug#532376: r8169: network buffer overflow

2009-06-08 Thread Ben Hutchings
Package: linux-2.6 Version: 2.6.29-5 Severity: critical Tags: security patch Some or all NICs supported by r8169 seem to ignore the buffer sizes in RX descriptors, and will write up to the global maximum frame size. This means a remote attacker can overflow RX buffers, probably allowing for code i