In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tp_meter: restrict number of unacked list entries
When the unacked_list is unbound, an attacker could send messages with
small lengths and appropriated seqno + gaps to force the receiver to
allocate more and more unacked_list entries. And the end either causing an
out-of-memory situation or increase the management overhead for the (large)
list that significant portions of CPU cycles are wasted in searching
through the list.
When limiting the list to a specific number, it is important to still
correctly add a new entry to the list. But if the list became larger than
the limit, the last entry of the list (with the highest seqno) must be
dropped to still allow the earlier seqnos to finish and therefore to
continue the process. Otherwise, the process might get stuck with too high
seqnos which are not handled by batadv_tp_ack_unordered().
33a3bb4a3345bb511f9c69c913da95d4693e2a4e builds before 31a88792bfba142be3c9521538c1db805677381f; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 1111a3381bca2d1f084a07686bc783af5ab23df7; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e builds before 1c616b0be4bd8399d485e25e91859373b95d6013; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before f8c499fd275e59203b77fca76ae6ef2d096c2133; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before c6231d628d06d841bc1617b2f7034f5f39876b16; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 2233787658db859f0a9b83cb397cf783bb8be865; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e builds before 1fb8762600a393d1caccd63be5d07e1756982d68; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before e7c775110e1858e5a7471a23a9c9658c0af9df89
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
