The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-rtUpgrade kernel-paeUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-ps3Upgrade kernel-rt_debugUpgrade kernel-ppc64Upgrade kernel-docs | Feb 17, 2015 | Sep 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-itanium | Nov 8, 2024 | Sep 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub