[prev in list] [next in list] [prev in thread] [next in thread]
List: openais
Subject: Re: [Openais] IGMP vulnerabilities
From: Steven Dake <sdake () mvista ! com>
Date: 2005-03-29 20:25:03
Message-ID: 1112127903.3322.38.camel () persist ! az ! mvista ! com
[Download RAW message or body]
KCC,
Are you using a kernel.org kernel or some distro kernel? I have never
seen this on any 2.4.20 target before in 2 years of dev/testing.. (I did
see some problems on 2.6.3-2.6.7)...
Regards
-steve
On Tue, 2005-03-29 at 04:57, KCC wrote:
> Hi, All
>
> I found that openais sometimes will hang linux system.
> It's much easy to happen on old version of linux kernel.
> I have been tested it on linux kernel 2.4.8 and 2.4.20.
> When starting aisexec, system will hang about 10sec. ( P4 2.8G x86 PC)
> And break all network connections.
> When stoping aisexec, the same thing will happen again.
>
> It's not always happen. After some testing, I think the reason possiblely is
> IGMP packets.
> ( Start aisexec : IGMP V2 Membership Report
> Stop aisexec: IGMP V2 Leave Group )
>
> >From 2004 till now, several IGMP vulnerabilities have been found:
> http://www.securityfocus.com/bid/11917/info/
>
> Openais maybe run into one of those vulnerabilities and cause system hang.
> Update kernel to new version will solve the problem.
> As I testing on linux kernel 2.4.29, it never happen.
>
> KCC
>
>
> ______________________________________________________________________
> _______________________________________________
> Openais mailing list
> Openais@lists.osdl.org
> http://lists.osdl.org/mailman/listinfo/openais
_______________________________________________
Openais mailing list
Openais@lists.osdl.org
http://lists.osdl.org/mailman/listinfo/openais
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic