The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a Rose Attack that involves sending a subset of small IP fragments that do not form a complete, larger packet.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.2 (including) | 10.2 (including) |
| Mac_os_x | Apple | 10.2.1 (including) | 10.2.1 (including) |
| Mac_os_x | Apple | 10.2.2 (including) | 10.2.2 (including) |
| Mac_os_x | Apple | 10.2.3 (including) | 10.2.3 (including) |
| Mac_os_x | Apple | 10.2.4 (including) | 10.2.4 (including) |
| Mac_os_x | Apple | 10.2.5 (including) | 10.2.5 (including) |
| Mac_os_x | Apple | 10.2.6 (including) | 10.2.6 (including) |
| Mac_os_x | Apple | 10.2.7 (including) | 10.2.7 (including) |
| Mac_os_x | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x | Apple | 10.3 (including) | 10.3 (including) |
| Mac_os_x | Apple | 10.3.1 (including) | 10.3.1 (including) |
| Mac_os_x | Apple | 10.3.2 (including) | 10.3.2 (including) |
| Mac_os_x | Apple | 10.3.3 (including) | 10.3.3 (including) |
| Mac_os_x | Apple | 10.3.4 (including) | 10.3.4 (including) |
| Mac_os_x_server | Apple | 10.2 (including) | 10.2 (including) |
| Mac_os_x_server | Apple | 10.2.1 (including) | 10.2.1 (including) |
| Mac_os_x_server | Apple | 10.2.2 (including) | 10.2.2 (including) |
| Mac_os_x_server | Apple | 10.2.3 (including) | 10.2.3 (including) |
| Mac_os_x_server | Apple | 10.2.4 (including) | 10.2.4 (including) |
| Mac_os_x_server | Apple | 10.2.5 (including) | 10.2.5 (including) |
| Mac_os_x_server | Apple | 10.2.6 (including) | 10.2.6 (including) |
| Mac_os_x_server | Apple | 10.2.7 (including) | 10.2.7 (including) |
| Mac_os_x_server | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x_server | Apple | 10.3 (including) | 10.3 (including) |
| Mac_os_x_server | Apple | 10.3.1 (including) | 10.3.1 (including) |
| Mac_os_x_server | Apple | 10.3.2 (including) | 10.3.2 (including) |
| Mac_os_x_server | Apple | 10.3.3 (including) | 10.3.3 (including) |
| Mac_os_x_server | Apple | 10.3.4 (including) | 10.3.4 (including) |
References
- http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt
- http://marc.info/?l=bugtraq\u0026m=108075899619193\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=108308604119618\u0026w=2
- http://www.auscert.org.au/render.html?it=4291
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16946
- http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt
- http://marc.info/?l=bugtraq\u0026m=108075899619193\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=108308604119618\u0026w=2
- http://www.auscert.org.au/render.html?it=4291
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16946