Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-doc | Dec 1, 2016 | Jan 10, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 11, 2011 |
| Suse | — | Upgrade kernel-vmipaeUpgrade kernel-debugUpgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-kdumppaeUpgrade kernel-bigsmpUpgrade kernel-kdumpUpgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-smpUpgrade kernel-ppc64 | Feb 17, 2015 | Jan 10, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-rt | Nov 8, 2024 | Jan 11, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Jan 10, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub