35 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-89479
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in...
Linux Distros Unpatched Vulnerability : CVE-2026-89476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix stream-outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can...
Linux Distros Unpatched Vulnerability : CVE-2026-89478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: drop a chunk if its transport was removed sctprcv resolves the transport once per packet and leaves it in chunk-transport. The lookup reference, or the on...
The vulnerability of the sctp_process_strreset_resp() function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.
The vulnerability of the sctpprocessstrresetresp function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to cause...
Linux Distros Unpatched Vulnerability : CVE-2026-80890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is...
The vulnerability of the sctp_sock_dump_one() function in the net/sctp/diag.c module of the Linux operating system’s SCTP (Stream Control Transmission Protocol) kernel allows a attacker to gain access to protected information or cause service failures.
The vulnerability of the sctpsockdumpone function in the net/sctp/diag.c module of the Linux operating system’s SCTP Stream Control Transmission Protocol kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...
Linux Distros Unpatched Vulnerability : CVE-2026-80717
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its paramete...
Linux Distros Unpatched Vulnerability : CVE-2026-74752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled...
Astra Linux – Vulnerability in Linux, Linux 5.10
A flaw was discovered in the Linux SCTP stack. A blind attacker may be able to terminate an existing SCTP connection by using invalid chunks, provided that the attacker knows the IP addresses and port numbers being used, and that the attacker can send packets with spoofed IP addresses...
UBUNTU-CVE-2026-74586
In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer to send...
Linux Distros Unpatched Vulnerability : CVE-2026-74587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the...
Linux Distros Unpatched Vulnerability : CVE-2026-74586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCON...
Linux Distros Unpatched Vulnerability : CVE-2026-63971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires the socket lock while waiting for the association to reach...
Linux Distros Unpatched Vulnerability : CVE-2025-40281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift- out-of-bounds 1 Blamed commit added rtoalphamax and...
Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21639)
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rtomin/max: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...
EUVD-2006-2272
Malware in sbrugna...
EUVD-2006-2273
Malware in sbrugna...
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-010)
The version of kernel installed on the remote host is prior to 5.4.162-86.275. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-010 advisory. 2024-08-27: CVE-2021-47190 was added to this advisory. 2024-08-27: CVE-2021-47184 was added to this advisor...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-049)
The version of kernel installed on the remote host is prior to 5.10.82-83.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-049 advisory. A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could...
