Lucene search

K
cve[email protected]CVE-2010-3432
HistoryNov 22, 2010 - 1:00 p.m.

CVE-2010-3432

2010-11-2213:00:02
CWE-20
web.nvd.nist.gov
70
8
linux kernel
denial of service
cve-2010-3432
sctp
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.7 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.35.6
Node
opensuseopensuseMatch11.3
OR
suselinux_enterprise_real_time_extensionMatch11sp1
Node
debiandebian_linuxMatch5.0
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch8.04-
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10

References

Social References

More

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.7 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%