The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-ps3Upgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-paeUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-xen | Feb 17, 2015 | Oct 6, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-hppa64 | Nov 8, 2024 | Oct 6, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub