Sun Solaris SCTP协议处理远程拒绝服务漏洞

BUGTRAQ ID: 29024,29023 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris处理畸形SCTP报文时存在漏洞，如果远程攻击者向Solaris发送了特制的SCTP报文的话，就可能导致系统忙碌，或消耗过多的网络通讯，造成拒绝服务的情况。 Sun Solaris 10x86 Sun Solaris 10.0 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-236321）以及相应补丁: Sun-Alert-236321：A Security Vulnerability in Solaris 10 Involving the...

CVE-2008-2090

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

CVE-2008-2089

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service panic via a crafted SCTP packet...

Code injection

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

Code injection

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service panic via a crafted SCTP packet...

CVE-2008-2089

CVE-2008-2089 affects Sun Solaris 10 SCTP protocol implementation, enabling remote denial of service (panic) via a crafted SCTP packet. The connected Nessus entries indicate kernel patches for Solaris 10: 127127-11 (sparc) and 127128-11 (x86) that address this vulnerability. No exploitation detai...

CVE-2008-2090

Affected software: Sun Solaris 10 (SCTP protocol implementation).Vulnerability: Unspecified SCTP handling could allow remote attackers to cause denial of service via crafted SCTP packets, leading to CPU consumption and network traffic amplification.Impact: CVSS base score 7.8 (HIGH) with network ...

CVE-2008-2089

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service panic via a crafted SCTP packet...

CVE-2008-2090

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

GLSA-200803-32 : Wireshark: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200803-32 Wireshark: Denial of Service Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors. Impact : A remote attacker could cause a Denial of Service by sending a malformed packet. Workaround : Disable the...

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors. Impact A remote attacker could cause a Denial of Service by sending a malformed packet. Workaround Disable the SCTP, SNMP, and TFTP...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 5058)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

openSUSE 10 Security Update : wireshark (wireshark-5057)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE 10 Security Update : ethereal (ethereal-5056)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2008-1070

The SCTP dissector in Wireshark formerly Ethereal 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service crash via a malformed packet...

CVE-2008-1070

The SCTP dissector in Wireshark formerly Ethereal 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service crash via a malformed packet...

CVE-2008-1070

The SCTP dissector in Wireshark formerly Ethereal 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service crash via a malformed packet...

Code injection

The SCTP dissector in Wireshark formerly Ethereal 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service crash via a malformed packet...

CVE-2008-1070

CVE-2008-1070 affects the SCTP dissector in Wireshark (Ethereal) 0.99.5–0.99.7, allowing remote attackers to cause a crash (DoS) via a malformed packet. Connected advisories show MiracleLinux/Nessus entries confirming the issue and noting fixes in Wireshark builds (e.g., upgrade to 1.0.3) as part...

CVE-2008-1070

The SCTP dissector in Wireshark formerly Ethereal 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service crash via a malformed packet...