Lucene search

RedhatCVE-2008-3526

HistoryAug 27, 2008 - 8:41 p.m.

CVE-2008-3526

2008-08-2720:41:00

CWE-189

redhat

web.nvd.nist.gov

cve-2008-3526

integer overflow

sctp

denial of service

linux kernel

remote attackers

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.088

Percentile

94.7%

JSON

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.24rc2

linuxlinux_kernelMatch2.6.24rc3

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.24.3

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.24_rc1

linuxlinux_kernelMatch2.6.24_rc4

linuxlinux_kernelMatch2.6.24_rc5

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

linuxlinux_kernelMatch2.6.26

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

VendorProductVersionCPE
linuxlinux_kernel2.6.24cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*
linuxlinux_kernel2.6.24cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*
linuxlinux_kernel2.6.24.1cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.2cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.3cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.4cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.5cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.6cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*
linuxlinux_kernel2.6.24.7cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.24	cpe:2.3:o:linux:linux_kernel:2.6.24:::::::*
linux	linux_kernel	2.6.24	cpe:2.3:o:linux:linux_kernel:2.6.24:rc2::::::
linux	linux_kernel	2.6.24	cpe:2.3:o:linux:linux_kernel:2.6.24:rc3::::::
linux	linux_kernel	2.6.24.1	cpe:2.3:o:linux:linux_kernel:2.6.24.1:::::::*
linux	linux_kernel	2.6.24.2	cpe:2.3:o:linux:linux_kernel:2.6.24.2:::::::*
linux	linux_kernel	2.6.24.3	cpe:2.3:o:linux:linux_kernel:2.6.24.3:::::::*
linux	linux_kernel	2.6.24.4	cpe:2.3:o:linux:linux_kernel:2.6.24.4:::::::*
linux	linux_kernel	2.6.24.5	cpe:2.3:o:linux:linux_kernel:2.6.24.5:::::::*
linux	linux_kernel	2.6.24.6	cpe:2.3:o:linux:linux_kernel:2.6.24.6:::::::*
linux	linux_kernel	2.6.24.7	cpe:2.3:o:linux:linux_kernel:2.6.24.7:::::::*