Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

IPv6 prefix could be added multiple times to prefix timer list #25698

Closed
jukkar opened this issue May 28, 2020 · 0 comments · Fixed by #25699
Closed

IPv6 prefix could be added multiple times to prefix timer list #25698

jukkar opened this issue May 28, 2020 · 0 comments · Fixed by #25699
Assignees
@jukkar
Labels
area: Networking bug The issue is a bug, or the PR is fixing a bug priority: medium Medium impact/importance bug
Milestone
v2.3.0

Comments

@jukkar
Copy link
Member

jukkar commented May 28, 2020

Describe the bug
We could add same IPv6 prefix multiple times to prefix timer list. This can lead to denial-of-service issue if we receive suitable crafted IPv6 RA packets.
@jukkar jukkar added bug The issue is a bug, or the PR is fixing a bug priority: medium Medium impact/importance bug area: Networking labels May 28, 2020
@jukkar jukkar self-assigned this May 28, 2020
jukkar added a commit to jukkar/zephyr that referenced this issue May 28, 2020
@jukkar
net: ipv6: Do not add same prefix multiple times to timer list
35a9e3f 
Make sure that we do not add same IPv6 prefix, received from RA,
multiple times to prefix timer list. This avoids possible
denial-of-service issue if we receive suitably crafted RA packet.

Fixes zephyrproject-rtos#25698

Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
@jukkar jukkar mentioned this issue May 28, 2020
Merged
@jukkar jukkar added this to the v2.3.0 milestone May 28, 2020
carlescufi pushed a commit that referenced this issue May 28, 2020
@jukkar @carlescufi
net: ipv6: Do not add same prefix multiple times to timer list
71686dd 
Make sure that we do not add same IPv6 prefix, received from RA,
multiple times to prefix timer list. This avoids possible
denial-of-service issue if we receive suitably crafted RA packet.

Fixes #25698

Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
oleg-krv pushed a commit to oleg-krv/zephyr-local that referenced this issue May 30, 2020
@jukkar @oleg-krv
net: ipv6: Do not add same prefix multiple times to timer list
f88065e 
Make sure that we do not add same IPv6 prefix, received from RA,
multiple times to prefix timer list. This avoids possible
denial-of-service issue if we receive suitably crafted RA packet.

Fixes zephyrproject-rtos#25698

Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jukkar jukkar

Labels
area: Networking bug The issue is a bug, or the PR is fixing a bug priority: medium Medium impact/importance bug
Projects
None yet
Milestone
v2.3.0
Development

Successfully merging a pull request may close this issue.

net: ipv6: Do not add same prefix multiple times to timer list jukkar/zephyr
1 participant
@jukkar