Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-docUpgrade kernelUpgrade kernel-PAE | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-iseries64Upgrade kernel-rtUpgrade kernel-symsUpgrade kernel-rt_timingUpgrade kernel-bigsmpUpgrade slert-releaseUpgrade kernel-debugUpgrade kernel-sourceUpgrade suse-releaseUpgrade kernel-rt_bigsmpUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-rt_debug | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.15-52-686 | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub