Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-debug-devel | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-rt_bigsmpUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-rt_timingUpgrade kernel-bigsmpUpgrade kernel-ppc64Upgrade kernel-rtUpgrade slert-release | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.20-17-itanium | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub