CVE-2011-1573

2011-10-0600:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.01 Low

EPSS

Percentile

83.5%

JSON

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when
addip_enable and auth_enable are used, does not consider the amount of zero
padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK
chunks, which allows remote attackers to cause a denial of service (OOPS)
via crafted packet data.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-29.95UNKNOWN
ubuntu10.04noarchlinux< 2.6.32-32.62UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-316.30UNKNOWN
ubuntu10.04noarchlinux-fsl-imx51< 2.6.31-611.29UNKNOWN
ubuntu10.04noarchlinux-lts-backport-natty< 2.6.38-1.27~lucid1UNKNOWN
ubuntu10.04noarchlinux-mvl-dove< 2.6.32-217.34UNKNOWN
ubuntu10.10noarchlinux-mvl-dove< 2.6.32-417.34UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	linux	< 2.6.24-29.95	UNKNOWN
ubuntu	10.04	noarch	linux	< 2.6.32-32.62	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-316.30	UNKNOWN
ubuntu	10.04	noarch	linux-fsl-imx51	< 2.6.31-611.29	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-natty	< 2.6.38-1.27~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-mvl-dove	< 2.6.32-217.34	UNKNOWN
ubuntu	10.10	noarch	linux-mvl-dove	< 2.6.32-417.34	UNKNOWN