Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade kernel-rt_bigsmpUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-rt_debugUpgrade kernel-xenpaeUpgrade kernel-rt_timingUpgrade kernel-sourceUpgrade kernel-rtUpgrade slert-releaseUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-xen | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-itanium-smp | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub