The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-ps3Upgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-paeUpgrade kernel-vanillaUpgrade kernel-xen | Feb 17, 2015 | Sep 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-21-server | Nov 8, 2024 | Sep 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub