hi again,
sorry for the delay, but the bug triggers only when the remote peer
disconnects me - and it does it only once a day.
Marco d'Itri wrote:
reassign 299875 kernel
retitle 299875 CAN-2005-0384: Remote Linux DoS on ppp servers
tag 299875 patch security
yes, it really looks like a pppd
Okay. Do I correctly understand that kernel patch + downgrade solves
your problem?
And, if you have *just* the kernel patch, /usr/sbin/pppd hangs, but
doesn't crash the system?
Thanks,
Justin
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL
On Mar 20, Christian Kujau [EMAIL PROTECTED] wrote:
- pppd tries to re-establish the connection, says Starting link in the
logfile [1] and then just hangs.
Weird. Maybe you hit something like #298657 and the other similar bugs.
--
ciao,
Marco
signature.asc
Description: Digital signature
Justin Pryzby wrote:
Okay. Do I correctly understand that kernel patch + downgrade solves
your problem?
i don't even have to patch the kernel. i tried with 2.6.11-rc5-bk2, same
thing. but (only!) downgrading ppp_2.4.2 (current is ppp_2.4.3) did the trick.
And, if you have *just* the kernel
Processing commands for [EMAIL PROTECTED]:
reassign 299875 kernel
Bug#299875: ppp: out-of-memory 30min after LCP terminated by peer
Bug reassigned from package `ppp' to `kernel'.
retitle 299875 CAN-2005-0384: Remote Linux DoS on ppp servers
Bug#299875: ppp: out-of-memory 30min after LCP
reassign 299875 kernel
retitle 299875 CAN-2005-0384: Remote Linux DoS on ppp servers
tag 299875 patch security
thanks
Paul Mackerras says that this bug affects all kernels (2.4 and 2.6) and
can be easily triggered remotely, but is only a CPU DoS.
from 2.6.11.4:
diff -Nru
Justin Pryzby wrote:
I assume that you have seen this:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.4
yes i have*now*. obviously this was a security issue (CAN-2005-0384)
and i *guess* that's why the issue was not discussed in public. what pity
and what a waste of time in
Package: ppp
Version: 2.4.2+20040428-6
Severity: critical
Justification: breaks the whole system
hello pppeople,
i've encountered serious problems with pppd and days of monitoring the
issues lead me to the assumption that pppd is to blame. feel free to
tell me otherwise and i'll happily forward
I assume that you have seen this:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.4
If not .. tag patch:) In less than 100 lines, even!
Justin
On Thu, Mar 17, 2005 at 02:54:56AM +0100, Christian wrote:
Package: ppp
Version: 2.4.2+20040428-6
Severity: critical
Justification:
Including a patch from kernel.org. Given the size of the patch, you
may not trust it, but that's what I got ..
http://www.kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.6%2Fpatch-2.6.11.4.bz2;z=15
If I understand the situation correctly, this needs to be reassigned
and cloned to
10 matches
Mail list logo