The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-paeUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-rt_debugUpgrade kernel-ps3Upgrade kernel-vanillaUpgrade kernel-sourceUpgrade kernel-docs | Feb 17, 2015 | Oct 20, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.15-53-mckinley | Nov 8, 2024 | Oct 21, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub