Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xen-devel | Dec 1, 2016 | May 16, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 16, 2008 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-symsUpgrade slert-releaseUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-sourceUpgrade kernel-rt_timingUpgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-defaultUpgrade suse-releaseUpgrade kernel-xenpaeUpgrade kernel-rt_bigsmpUpgrade kernel-rt_debugUpgrade kernel-kdump | Feb 17, 2015 | May 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-powerpc64-smp | Nov 8, 2024 | May 16, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | May 16, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | May 16, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub