PT-2006-3241 · Linux+1 · Linux Sctp+1

Publicado

2006-05-09

·

Atualizado

2017-10-11

·

CVE-2006-2274

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux SCTP (lksctp) versions prior to 2.6.17
Description The issue allows remote attackers to cause a denial of service, resulting in an infinite recursion and crash. This occurs when a packet contains two or more DATA fragments, causing an skb pointer to refer back to itself during message reassembly, which leads to infinite recursion in the sctp skb pull function.
Recommendations For Linux SCTP (lksctp) versions prior to 2.6.17, update to version 2.6.17 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-2274
DSA-1097-1
DSA-1103
RHSA-2006:0493
RHSA-2006_0493

Produtos afetados

Linux Sctp
Red Hat