Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-headers | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-rt_bigsmpUpgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-rt_timingUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-ppc64Upgrade slert-releaseUpgrade kernel-iseries64Upgrade kernel-rt | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-19-itanium | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub