Re: Vulnerability Disclosure in net/

2022-05-26 Thread Michael Nazzareno Trimarchi
Hi Fabio On Thu, May 26, 2022 at 2:13 PM Fabio Estevam wrote: > > Hi Ramon, > > On Wed, May 25, 2022 at 11:46 PM Ramon Fried wrote: > > > Hi Nicolas, > > Thanks for the research. > > I have read your description thoroughly, very interesting. > > I will implement fixes to the findings. > > Is it

Re: Vulnerability Disclosure in net/

2022-05-26 Thread Fabio Estevam
Hi Ramon, On Wed, May 25, 2022 at 11:46 PM Ramon Fried wrote: > Hi Nicolas, > Thanks for the research. > I have read your description thoroughly, very interesting. > I will implement fixes to the findings. Is it enough to add the check below? --- a/net/net.c +++ b/net/net.c @@ -906,6 +906,9

Re: Vulnerability Disclosure in net/

2022-05-26 Thread Matthias Brugger
Hi Ramon, On 26/05/2022 04:46, Ramon Fried wrote: On Wed, May 18, 2022 at 7:14 PM Nicolas Bidron wrote: Hello, We found a couple of bugs in net/net.s in the IP defragmentation function __net_defragment(). Below the writeup for the 2 bugs: ---BUG 1--- # Hole Descriptor

Re: Vulnerability Disclosure in net/

2022-05-25 Thread Ramon Fried
On Wed, May 18, 2022 at 7:14 PM Nicolas Bidron wrote: > > Hello, > > We found a couple of bugs in net/net.s in the IP defragmentation > function __net_defragment(). Below the writeup for the 2 bugs: > > ---BUG 1--- > > # Hole Descriptor Overwrite in U-Boot IP Packet

Vulnerability Disclosure in net/

2022-05-18 Thread Nicolas Bidron
Hello, We found a couple of bugs in net/net.s in the IP defragmentation function __net_defragment(). Below the writeup for the 2 bugs: ---BUG 1--- # Hole Descriptor Overwrite in U-Boot IP Packet Defragmentation Leads to Arbitrary Out of Bounds Write Primitive (CVE-TBD) |  |