upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-09 00:32:25 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed remotely exploitable DoS in arpresolve().

Browse source 
Easily exploitable by flood pinging the target
host over an interface with the IFF_NOARP flag
set (all you need to know is the target host's
MAC address).

MFC after:	0 days
This commit is contained in:
Ruslan Ermilov 2001-12-05 18:13:34 +00:00
parent 959f4950f5
commit 47891de1a5
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/netinet/if_ether.c
View file

@ -436,8 +436,10 @@ arpresolve(ifp, rt, m, dst, desten, rt0)
* Probably should not allocate empty llinfo struct if we are
* not going to be sending out an arp request.
*/
if (ifp->if_flags & IFF_NOARP)
if (ifp->if_flags & IFF_NOARP) {
m_freem(m);
return (0);
}
/*
* There is an arptab entry, but no ethernet address
* response yet. Replace the held mbuf with this