Headline
OpenBSD 7.2 ip_srcroute() Overflow
OpenBSD version 7.2 suffers from an overflow vulnerability. ip_dooptions() will allow IPOPT_SSRR with optlen = 2. save_rte() will set isr_nhops to very large value, which will cause an overflow in the next ip_srcroute() call.
© 2022 Packet Storm. All rights reserved.