Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 24, 2011 |
| Suse | — | Upgrade preload-kmp-defaultUpgrade kernel-traceUpgrade kernel-source-vanillaUpgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-vanilla-develUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-vanilla-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade preload-kmp-desktopUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-ec2-extraUpgrade kernel-vmi-baseUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-desktopUpgrade kernel-desktop-develUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-vanillaUpgrade kernel-vmi-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-desktop-base | Feb 17, 2015 | Jun 24, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.31-610-imx51 | Nov 8, 2024 | Jun 24, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub