The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-iseries64Upgrade kernel-vmi-baseUpgrade kernel-traceUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-vmiUpgrade kernel-desktopUpgrade kernel-debugUpgrade kernel-ec2-baseUpgrade kernel-kdumppaeUpgrade kernel-desktop-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade preload-kmp-desktopUpgrade kernel-debug-baseUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-default-baseUpgrade kernel-smpUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-ec2-develUpgrade kernel-bigsmpUpgrade kernel-vmipaeUpgrade preload-kmp-defaultUpgrade kernel-xenpaeUpgrade kernel-ec2-extraUpgrade kernel-vanilla-develUpgrade kernel-vmi-develUpgrade kernel-defaultUpgrade kernel-desktop-baseUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-trace-devel | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-versatile | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub