A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Jun 8, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 8, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
| Vmsa 2012 0006 | — | Upgrade VMware ESX 4.0 to build number 660575 | Aug 17, 2012 | Aug 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub