net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-PAE-devel | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 2, 2012 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-lpia | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub