net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-PAE-devel | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 2, 2012 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-default-man | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpc | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub