net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 2, 2012 |
| Suse | — | Upgrade kernel-pae-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-default-manUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-ppc64 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-powerpc64-smp | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub