CVE-2006-2274 | BDVDB-2026-16788 Detail
Description#
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
- http://www.redhat.com/support/errata/RHSA-2006-0493.html
- http://www.vupen.com/english/advisories/2006/2554
- http://www.securityfocus.com/bid/17955
- http://secunia.com/advisories/20716
- http://secunia.com/advisories/21476
- http://secunia.com/advisories/21745
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
- http://www.ubuntu.com/usn/usn-302-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:123
- http://www.debian.org/security/2006/dsa-1097
- http://www.novell.com/linux/security/advisories/2006-05-31.html
- http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6
- http://www.trustix.org/errata/2006/0026
- http://www.debian.org/security/2006/dsa-1103
Show all 23
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26432
- http://secunia.com/advisories/21045
- http://secunia.com/advisories/20237
- http://secunia.com/advisories/20398
- http://www.osvdb.org/25746
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9531
- http://secunia.com/advisories/20671
- http://secunia.com/advisories/20914
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.