net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-devel | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 2, 2012 |
| Suse | — | Upgrade kernel-vmiUpgrade kernel-kdumpUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-xenUpgrade kernel-kdumppaeUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-vmipaeUpgrade kernel-syms | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-preempt | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub