net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-ps3Upgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-syms | Feb 17, 2015 | Sep 3, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-server | Nov 8, 2024 | Sep 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub