Code injection

2010-05-0718:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.706 High

EPSS

Percentile

97.9%

JSON

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

CPENameOperatorVersion
linux_kerneleq2.6.32
linux_kerneleq2.6.27.12
linux_kerneleq2.6.20.6
linux_kerneleq2.6.32.5
linux_kerneleq2.6.28 rc4
linux_kerneleq2.6.28 git7
linux_kerneleq2.6.20.9
linux_kerneleq2.6.26 rc4
linux_kerneleq2.6.18 rc3
linux_kerneleq2.6.29

Name	Operator	Version
linux_kernel	eq	2.6.32
linux_kernel	eq	2.6.27.12
linux_kernel	eq	2.6.20.6
linux_kernel	eq	2.6.32.5
linux_kernel	eq	2.6.28 rc4
linux_kernel	eq	2.6.28 git7
linux_kernel	eq	2.6.20.9
linux_kernel	eq	2.6.26 rc4
linux_kernel	eq	2.6.18 rc3
linux_kernel	eq	2.6.29