Page MenuHomeFreeBSD

Do stricter checks in the msg2sp() function
ClosedPublic

Authored by ae on Jul 31 2017, 4:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Dec 8, 3:29 PM
Unknown Object (File)
Nov 3 2024, 9:45 AM
Unknown Object (File)
Oct 1 2024, 4:10 PM
Unknown Object (File)
Sep 17 2024, 1:56 AM
Unknown Object (File)
Sep 16 2024, 2:11 AM
Unknown Object (File)
Sep 4 2024, 11:55 AM
Unknown Object (File)
Sep 1 2024, 9:21 PM
Unknown Object (File)
Jun 6 2024, 12:17 PM
Subscribers

Details

Summary

This patch should fix the IPsec related problem described in the DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf

Actually, this IP[V6]_IPSEC_POLICY socket option is available only for privileged user, and when you are root user, you have many much easiest ways to crash the system. But anyway it is better to fix it.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision was automatically updated to reflect the committed changes.