kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH

🗓️ 22 Jan 2009 10:39:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

SCTP kernel DoS OOPS when INIT-ACK indicates peer lacks AUTH, causing transport cleanup and timer expiry.

Reporter	Title	Published	Views	Family All 186
ATTACKERKB	CVE-2008-4576	15 Oct 200820:07	–	attackerkb
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5	i686	kernel-rt	0:2.6.24.7-93.el5rt	kernel-rt-0:2.6.24.7-93.el5rt.i686.rpm
Red Hat Enterprise Linux	5	x86_64	kernel-rt	0:2.6.24.7-93.el5rt	kernel-rt-0:2.6.24.7-93.el5rt.x86_64.rpm
Red Hat Enterprise Linux	5	i686	kernel-rt-debug	0:2.6.24.7-93.el5rt	kernel-rt-debug-0:2.6.24.7-93.el5rt.i686.rpm
Red Hat Enterprise Linux	5	x86_64	kernel-rt-debug	0:2.6.24.7-93.el5rt	kernel-rt-debug-0:2.6.24.7-93.el5rt.x86_64.rpm
Red Hat Enterprise Linux	5	i686	kernel-rt-debug-debuginfo	0:2.6.24.7-93.el5rt	kernel-rt-debug-debuginfo-0:2.6.24.7-93.el5rt.i686.rpm
Red Hat Enterprise Linux	5	x86_64	kernel-rt-debug-debuginfo	0:2.6.24.7-93.el5rt	kernel-rt-debug-debuginfo-0:2.6.24.7-93.el5rt.x86_64.rpm
Red Hat Enterprise Linux	5	i686	kernel-rt-debug-devel	0:2.6.24.7-93.el5rt	kernel-rt-debug-devel-0:2.6.24.7-93.el5rt.i686.rpm
Red Hat Enterprise Linux	5	x86_64	kernel-rt-debug-devel	0:2.6.24.7-93.el5rt	kernel-rt-debug-devel-0:2.6.24.7-93.el5rt.x86_64.rpm
Red Hat Enterprise Linux	5	i686	kernel-rt-debuginfo	0:2.6.24.7-93.el5rt	kernel-rt-debuginfo-0:2.6.24.7-93.el5rt.i686.rpm
Red Hat Enterprise Linux	5	x86_64	kernel-rt-debuginfo	0:2.6.24.7-93.el5rt	kernel-rt-debuginfo-0:2.6.24.7-93.el5rt.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2008-4576
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-4576
cve	www.cve.org/CVERecord

21 Nov 2025 17:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.8

EPSS0.0368

stream control protocol auth support init ack transport cleanup timer expiry denial of service