[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openais
Subject:    Re: [Openais] IGMP vulnerabilities
From:       Steven Dake <sdake () mvista ! com>
Date:       2005-03-29 20:25:03
Message-ID: 1112127903.3322.38.camel () persist ! az ! mvista ! com
[Download RAW message or body]

KCC,

Are you using a kernel.org kernel or some distro kernel?  I have never
seen this on any 2.4.20 target before in 2 years of dev/testing.. (I did
see some problems on 2.6.3-2.6.7)...

Regards
-steve


On Tue, 2005-03-29 at 04:57, KCC wrote:
> Hi, All
> 
> I found that openais sometimes will hang linux system.
> It's much easy to happen on old version of linux kernel.
> I have been tested it on linux kernel 2.4.8 and 2.4.20.
> When starting aisexec, system will hang about 10sec. ( P4 2.8G x86 PC)
> And break all network connections.
> When stoping aisexec, the same thing will happen again.
> 
> It's not always happen. After some testing, I think the reason possiblely is 
> IGMP packets.
> ( Start aisexec : IGMP V2 Membership Report
>   Stop aisexec: IGMP V2 Leave Group )
> 
> >From 2004 till now, several IGMP vulnerabilities have been found:
> http://www.securityfocus.com/bid/11917/info/
> 
> Openais maybe run into one of those vulnerabilities and cause system hang.
> Update kernel to new version will solve the problem.
> As I testing on linux kernel 2.4.29, it never happen.
> 
> KCC
> 
> 
> ______________________________________________________________________
> _______________________________________________
> Openais mailing list
> Openais@lists.osdl.org
> http://lists.osdl.org/mailman/listinfo/openais



_______________________________________________
Openais mailing list
Openais@lists.osdl.org
http://lists.osdl.org/mailman/listinfo/openais


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic