The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 11, 2007 |
| Suse | — | Upgrade kernel-umUpgrade kernel-xenpaeUpgrade kernel-s390x-debugUpgrade kernel-symsUpgrade kernel-pseries64Upgrade um-host-kernelUpgrade kernel-s390Upgrade suse-releaseUpgrade kernel-s390-debugUpgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-sn2Upgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-pmac64Upgrade um-host-install-initrdUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-64k-pagesizeUpgrade kernel-smp | Feb 17, 2015 | Jun 11, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-12-powerpc | Nov 8, 2024 | Jun 11, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub