A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Jun 8, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 8, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
| Vmsa 2012 0006 | — | Upgrade VMware ESX 4.0 to build number 660575 | Aug 17, 2012 | Aug 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub