Bug#532376: r8169: network buffer overflow

2009-06-09 Thread Thijs Kinkhorst
On tiisdei 9 Juny 2009, Ben Hutchings wrote: Package: linux-2.6 Version: 2.6.29-5 Severity: critical Tags: security patch Some or all NICs supported by r8169 seem to ignore the buffer sizes in RX descriptors, and will write up to the global maximum frame size. This means a remote attacker

Bug#532376: r8169: network buffer overflow

2009-06-08 Thread Ben Hutchings
Package: linux-2.6 Version: 2.6.29-5 Severity: critical Tags: security patch Some or all NICs supported by r8169 seem to ignore the buffer sizes in RX descriptors, and will write up to the global maximum frame size. This means a remote attacker can overflow RX buffers, probably allowing for code