PT-2013-1396 · Linux+1 · Linux Kernel+1
Eugene Teo
·
Published
2011-09-06
·
Updated
2023-02-13
·
CVE-2011-2482
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.21
Red Hat Enterprise Linux (RHEL) 5
Description
The issue is related to a certain Red Hat patch to the sctp sock migrate function in net/sctp/socket.c in the Linux kernel. It allows remote attackers to cause a denial of service via a crafted SCTP packet, resulting in a NULL pointer dereference and OOPS.
Recommendations
For Linux kernel versions prior to 2.6.21, update to version 2.6.21 or later to resolve the issue.
For Red Hat Enterprise Linux (RHEL) 5, consider applying a patch or update provided by Red Hat to fix the vulnerability in the sctp sock migrate function.
Exploit
Fix
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat