The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-ps3Upgrade kernel-docsUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-pae | Feb 17, 2015 | Oct 6, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-hppa32-smp | Nov 8, 2024 | Oct 6, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub