Executive brief
A vulnerability exists in the way many operating systems handle incoming internet traffic. An attacker can send specially crafted data packets that cause a computer or server to crash or reboot. This results in a denial of service, making the affected system unavailable for legitimate business operations.
Technical details
The 'Teardrop' attack is a denial of service (DoS) vulnerability involving the reassembly of IP fragments. It occurs when an attacker sends overlapping IP fragments with offset values that cause the reassembly logic in the target's TCP/IP stack to malfunction, typically leading to a kernel panic or system crash. The attack is network-based and requires no authentication or user interaction. While primarily associated with legacy operating systems, it represents a classic failure in input validation during packet reassembly. Modern systems have long since implemented protections against this specific fragmentation flaw.
Affected products
- Multiple Vendors TCP/IP Stack
Timeline
- 1997-12-16: disclosed