CVE-2006-2272

CVE-2006-2272 affects Linux SCTP (lksctp) in kernel versions before 2.6.17, allowing remote attackers to trigger a denial of service (kernel panic) via SCTP control chunks in fragmented packets. Public references in OpenVAS/Ubuntu/Fedora/Debian advisories confirm the issue and link it with other ...

CVE-2006-2275

CVE-2006-2275 affects the SCTP (lksctp) implementation in Linux kernels prior to the 2.6.17 release. The issue allows a remote attacker to cause a Denial of Service (deadlock) by sending a large number of small messages to a receiver application that cannot process them quickly enough, resulting ...

CVE-2006-2274

CVE-2006-2274 affects the Linux kernel SCTP (lksctp) prior to 2.6.17. The vulnerability occurs in the SCTP driver when a packet contains two or more DATA fragments, causing the skb pointer to reference itself during message reassembly and leading to infinite recursion in sctp_skb_pull, which can ...