CVE-2024-42643

What it actually does

Integer overflow in fast_ping.c triggers misaligned memory access resulting in denial of service.

Why it matters to the business

Remote attackers can crash the affected service, causing operational downtime and potential loss of availability for dependent systems; the packages are widely deployed on enterprise Linux environments increasing exposure surface.

How an attack unfolds

An unauthenticated remote attacker sends specially crafted network packets to the listening service; the malformed input reaches the vulnerable fast_ping handling code, overflows an integer, produces misaligned access, and crashes the process.

How to fix it

Upgrade mozilla-nspr to 4.23-29.9.1, mozilla-nss to 3.47.1-38.12.1, and MozillaFirefox to 68.3.0-78.54.1 on SUSE Linux Enterprise Server 11 SP4-LTSS; apply vendor patches immediately and verify the new package versions are installed.

How to confirm the fix worked

Query installed package versions with the system package manager and confirm they match or exceed the fixed releases; monitor service stability under simulated network load matching the vulnerable code path.

Typical attack path

1. Identify exposed instances of the vulnerable service on the network
2. Craft and transmit packets that trigger the integer overflow path in fast_ping.c
3. Observe service crash and confirm denial-of-service condition

How to detect it

Review service and system logs for unexpected process terminations or segmentation faults around the time of suspicious inbound network traffic; correlate with network flow data showing high-volume or malformed packets to the service port.

What your security team should do

• Prioritize patching the listed packages on all SUSE Linux Enterprise Server 11 SP4-LTSS systems within the next maintenance window
• Restrict network exposure of the affected service to trusted sources until patches are applied
• Update vulnerability scanning policies to flag the pre-fix package versions