OpenBSD - Remote Kernel MPLS Stack Disclosure (pop.argus-systems.ai)
from hucste@lemmy.ml to openbsd@lemmy.ml on 21 Jun 10:14
https://lemmy.ml/post/49032535

mpls_do_error copies (nstk+1) label-stack entries from a fixed 16-entry array when no BoS label is present, leaking 4 bytes of adjacent kernel stack memory in the ICMP/MPLS error response.

#openbsd