PT-2013-1396 · Linux+1 · Linux Kernel+1
Eugene Teo
·
Publicado
2011-09-06
·
Atualizado
2023-02-13
·
CVE-2011-2482
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.21
Red Hat Enterprise Linux (RHEL) 5
Description
The issue is related to a certain Red Hat patch to the sctp sock migrate function in net/sctp/socket.c in the Linux kernel. It allows remote attackers to cause a denial of service via a crafted SCTP packet, resulting in a NULL pointer dereference and OOPS.
Recommendations
For Linux kernel versions prior to 2.6.21, update to version 2.6.21 or later to resolve the issue.
For Red Hat Enterprise Linux (RHEL) 5, consider applying a patch or update provided by Red Hat to fix the vulnerability in the sctp sock migrate function.
Exploit
Correção
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat