5.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:N/I:N/A:C
0.741 High
EPSS
Percentile
98.1%
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the
SCTP implementation in the Linux kernel before 3.8.5 does not properly
handle associations during the processing of a duplicate COOKIE ECHO chunk,
which allows remote attackers to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified other impact via
crafted SCTP traffic.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | linux | < 2.6.32-51.113 | UNKNOWN |
ubuntu | 12.04 | noarch | linux | < 3.2.0-41.66 | UNKNOWN |
ubuntu | 12.10 | noarch | linux | < 3.5.0-28.48 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-armadaxp | < 3.2.0-1617.27 | UNKNOWN |
ubuntu | 12.10 | noarch | linux-armadaxp | < 3.5.0-1612.19 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-356.69 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-lts-quantal | < 3.5.0-28.48~precise1 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-ti-omap4 | < 3.2.0-1430.39 | UNKNOWN |
ubuntu | 12.10 | noarch | linux-ti-omap4 | < 3.5.0-223.34 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2013-2206
nvd.nist.gov/vuln/detail/CVE-2013-2206
security-tracker.debian.org/tracker/CVE-2013-2206
ubuntu.com/security/notices/USN-1809-1
ubuntu.com/security/notices/USN-1811-1
ubuntu.com/security/notices/USN-1812-1
ubuntu.com/security/notices/USN-1813-1
ubuntu.com/security/notices/USN-1814-1
ubuntu.com/security/notices/USN-1939-1
ubuntu.com/security/notices/USN-1940-1
www.cve.org/CVERecord?id=CVE-2013-2206