lksctp-tools bug fix and enhancement update

An update is available for lksctp-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

SUSE CVE-2006-2271

The ECNE chunk handling in Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via an unexpected chunk when the session is in CLOSED state...

lksctp-tools bug fix and enhancement update

An update is available for lksctp-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

new packages: lksctp-tools

An update is available for lksctp-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

[Full-disclosure] rPSA-2006-0122-1 kernel

rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

CVE-2006-2275

CVE-2006-2275 affects the SCTP (lksctp) implementation in Linux kernels prior to the 2.6.17 release. The issue allows a remote attacker to cause a Denial of Service (deadlock) by sending a large number of small messages to a receiver application that cannot process them quickly enough, resulting ...

CVE-2006-2272

CVE-2006-2272 affects Linux SCTP (lksctp) in kernel versions before 2.6.17, allowing remote attackers to trigger a denial of service (kernel panic) via SCTP control chunks in fragmented packets. Public references in OpenVAS/Ubuntu/Fedora/Debian advisories confirm the issue and link it with other ...

CVE-2006-2271

The CVE-2006-2271 issue affects the Linux SCTP (lksctp) driver, exposing a vulnerability where the SCTP chunk handling can trigger a kernel panic when a remote peer sends unexpected chunks while the session is in CLOSED state. This has been addressed in upstream stable updates (e.g., Linux kernel...