SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade um-host-install-initrdUpgrade device-mapper-32bitUpgrade lkcdutilsUpgrade kernel-symsUpgrade ltraceUpgrade kernel-umUpgrade kernel-pmac64Upgrade um-host-kernelUpgrade device-mapper-x86Upgrade kernel-defaultUpgrade kernel-sn2Upgrade kernel-ppc64Upgrade lkcdutils-netdump-serverUpgrade kernel-smpUpgrade kernel-s390Upgrade icecreamUpgrade kernel-debugUpgrade kernel-iseries64Upgrade ltrace-32bitUpgrade sysstatUpgrade kernel-xenpaeUpgrade gfxbootUpgrade kernel-64k-pagesizeUpgrade kernel-xenUpgrade rsyncUpgrade oprofileUpgrade kernel-sourceUpgrade kernel-pseries64Upgrade kernel-s390xUpgrade device-mapperUpgrade kernel-kdumpUpgrade ltrace-64bitUpgrade device-mapper-64bitUpgrade kernel-bigsmp | Feb 17, 2015 | Jun 30, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.12-10-amd64-xeon | Nov 8, 2024 | Jun 30, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub