OSVDB ID: 26963

Title: Linux Kernel SCTP conntrack Chunkless Packet Remote DoS

Info

Disclosure

Jun 30, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Linux Kernel contains a flaw that may allow a remote denial of service. The issue is triggered when an error occurs when handling SCTP packets without a chunk, and will result in loss of availability for the platform.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.6.16.23, 2.6.17.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Kernel.Org Organization, Inc.

Linux Kernel

2.6.16.22
2.6.17.2

References

Credit

  • George A. Theall - thealltenablesecurity.com - TenableSecurity


Direct URL: http://osvdb.org/26963