Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-PAE | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-rt_timingUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-sourceUpgrade slert-releaseUpgrade kernel-bigsmpUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-rt_bigsmpUpgrade suse-releaseUpgrade kernel-xenpae | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.24-19-virtual | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub