Ibm aix "TCP large send offload" Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Ibm aix 7.x
Ibm aix 6.x
Ibm aix 5.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-0194

AIX is an open standard UNIX operating system that provides you with an enterprise information technology infrastructure.

Ibm aix has a security vulnerability in implementation. When the "TCP large send offload" option is enabled, an error occurs in the TCP stack. A specially crafted TCP packet sequence can be used to trigger the kernel crash.

<* Source: vendor

Link: http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ers.ibm.com/