CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:P/A:C
AI Score
Confidence
High
EPSS
Percentile
95.0%
Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:* |
linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:* |
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17
secunia.com/advisories/20185
secunia.com/advisories/20671
secunia.com/advisories/20716
secunia.com/advisories/20914
secunia.com/advisories/21045
secunia.com/advisories/21179
secunia.com/advisories/21465
secunia.com/advisories/21476
secunia.com/advisories/21498
secunia.com/advisories/22417
support.avaya.com/elmodocs2/security/ASA-2006-200.htm
www.debian.org/security/2006/dsa-1097
www.debian.org/security/2006/dsa-1103
www.mandriva.com/security/advisories?name=MDKSA-2006:123
www.mandriva.com/security/advisories?name=MDKSA-2006:150
www.novell.com/linux/security/advisories/2006_42_kernel.html
www.novell.com/linux/security/advisories/2006_47_kernel.html
www.osvdb.org/25695
www.redhat.com/support/errata/RHSA-2006-0575.html
www.securityfocus.com/bid/18085
www.ubuntu.com/usn/usn-302-1
www.vupen.com/english/advisories/2006/1893
www.vupen.com/english/advisories/2006/2554
exchange.xforce.ibmcloud.com/vulnerabilities/26584
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10622