Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-ps3Upgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-rt_debugUpgrade kernel-xenUpgrade kernel-docsUpgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-pae | Feb 17, 2015 | Aug 27, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinley | Nov 8, 2024 | Aug 27, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub