Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-devel | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade kernel-rt_bigsmpUpgrade kernel-xenpaeUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-rt_timingUpgrade slert-releaseUpgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-syms | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-itanium | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub