The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-PAE | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-vmipaeUpgrade kernel-vanilla-develUpgrade kernel-desktop-baseUpgrade kernel-docsUpgrade preload-kmp-defaultUpgrade kernel-paeUpgrade kernel-smpUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-ec2-develUpgrade kernel-xenpaeUpgrade kernel-vmi-develUpgrade kernel-bigsmpUpgrade kernel-debugUpgrade kernel-desktopUpgrade kernel-kdumppaeUpgrade kernel-ppc64Upgrade kernel-desktop-develUpgrade kernel-vanilla-baseUpgrade kernel-debug-baseUpgrade kernel-ec2-baseUpgrade kernel-iseries64Upgrade kernel-source-vanillaUpgrade kernel-vmiUpgrade kernel-trace-baseUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-vmi-baseUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-kdumpUpgrade preload-kmp-desktop | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-10-powerpc | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub