A 2.6 'packet of death' kernel vulnerability

Posted Jul 1, 2004 1:22 UTC (Thu) by dbharris (guest, #19820)
Parent article: A 2.6 'packet of death' kernel vulnerability

Does anybody know if this affects machines whose (netfilter, obviously) firewalls use state tracking?

A 2.6 'packet of death' kernel vulnerability

Posted Jul 1, 2004 9:10 UTC (Thu) by laf0rge (subscriber, #6469) [Link]

This is totally independent from ip_conntrack. If you use ip_conntrack or not, doesn't matter. You have to have a rule matching on tcp options, though (as described in the advisory).