Vulnerability CVE-2006-2274
Published: 2006-05-09   Modified: 2012-02-12

Description:
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Lksctp -> Stream control transmission protocol 

 References:
http://www.vupen.com/english/advisories/2006/2554
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9531
http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6
http://xforce.iss.net/xforce/xfdb/26432
http://www.ubuntu.com/usn/usn-302-1
http://www.trustix.org/errata/2006/0026
http://www.securityfocus.com/bid/17955
http://www.redhat.com/support/errata/RHSA-2006-0493.html
http://www.osvdb.org/25746
http://www.novell.com/linux/security/advisories/2006-05-31.html
http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
http://www.mandriva.com/security/advisories?name=MDKSA-2006:123
http://www.debian.org/security/2006/dsa-1103
http://www.debian.org/security/2006/dsa-1097
http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
http://secunia.com/advisories/21745
http://secunia.com/advisories/21476
http://secunia.com/advisories/21045
http://secunia.com/advisories/20914
http://secunia.com/advisories/20716
http://secunia.com/advisories/20671
http://secunia.com/advisories/20398
http://secunia.com/advisories/20237
Copyright 2024, cxsecurity.com

 

Back to Top