The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-docsUpgrade kernel-ps3Upgrade kernel-rt_debugUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-vanillaUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-rt | Feb 17, 2015 | Sep 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-sparc64 | Nov 8, 2024 | Sep 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub