Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service

From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlie...

CVE-2010-1173

creationtimestamp| type| source ---|---|--- 2010-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14594 2026-02-12 21:03:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcbyi7n27...

Ubuntu Update for Linux kernel vulnerabilities USN-966-1

Ubuntu Update for Linux kernel vulnerabilities USN-966-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9661.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-966-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Debian Security Advisory DSA 2053-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2053-1. OpenVAS Vulnerability Test $Id: deb20531.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2053-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2053-1 [email protected] http://www.debian.org/security/ dann frazier May 25, 2010 http://www.debian.org/security/faq -...

Linux Kernel sctp_process_unk_param SCTPChunkInit Buffer Overflow (CVE-2010-1173)

Linux is a popular open-source operating system. Along with established and mature standards, the operating systems supports a large number of new and experimental protocols, such as IPv6, SCTP, DCCP, and so on. A buffer overflow vulnerability exists in Linux Kernel Organization's Linux kernel. T...

CVE-2010-1173

CVE-2010-1173 affects Linux kernel SCTP: sctp_process_unk_param in net/sctp/sm_make_chunk.c (kernel 2.6.33.3 and earlier) enables remote attackers to crash the system via SCTPChunkInit with many invalid parameters (high error data). Connected advisories (e.g., MiracleLinux AXSA-2010-377:12 and re...

Symantec Discovery XFERWAN Service Buffer Overflow (CVE-2007-1173)

Symantec Discovery is a network asset management and configuration suite. This product is deployed in enterprise network to collect information about network computers and devices for management purpose. The product employs numerous communication protocols to access network nodes. One of the...

SuSE 11 Security Update : curl (SAT Patch Number 1173)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2009-1173

IBM WebSphere Application Server WAS 7.0 before 7.0.0.3 uses weak permissions 777 for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used...

CVE-2009-1173

IBM WebSphere Application Server 7.0 prior to 7.0.0.3 is affected by a permissions issue where files associated with interim fixes use 777 instead of the intended 755. This weak permission set could allow an attacker to modify these files and potentially impact the environment where the interim f...

Design/Logic Flaw

Mozilla Thunderbird 2.0.14 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which might allow remote attackers to cause a denial of service stack consumption or other resource...

Design/Logic Flaw

Kaspersky Internet Security Suite 2009 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource...

Design/Logic Flaw

Incredimail build 5853710 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

Design/Logic Flaw

Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or...

Design/Logic Flaw

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a...

Design/Logic Flaw

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5426

Kaspersky Internet Security Suite 2009 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource...

CVE-2008-5425

CVE-2008-5425 and related entries describe a DoS risk from processing large or multipart email messages. Affected products across connected records include ESet NOD32 2.70.0039.0000; Mozilla Thunderbird 2.0.14; Microsoft Outlook Express 6.00.2900.5512; Norton Antivirus in Norton Internet Security...

Gentoo Security Advisory GLSA 200606-19 (sendmail)

The remote host is missing updates announced in advisory GLSA 200606-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...