National Cyber Awareness System

Vulnerability Summary for CVE-2006-2274

Overview

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-2554

Hyperlink:http://www.vupen.com/english/advisories/2006/2554

External Source: OVAL

Name: oval:org.mitre.oval:def:9531

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9531

External Source: CONFIRM

Name: http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6

Hyperlink:http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6

External Source: XF

Name: linux-sctp-skb-pull-dos(26432)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26432

External Source: UBUNTU

Name: USN-302-1

Hyperlink:http://www.ubuntu.com/usn/usn-302-1

External Source: TRUSTIX

Name: 2006-0026

Hyperlink:http://www.trustix.org/errata/2006/0026

External Source: BID

Name: 17955

Hyperlink:http://www.securityfocus.com/bid/17955

External Source: REDHAT

Name: RHSA-2006:0493

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0493.html

External Source: OSVDB

Name: 25746

Hyperlink:http://www.osvdb.org/25746

External Source: SUSE

Name: SUSE-SA:2006:028

Hyperlink:http://www.novell.com/linux/security/advisories/2006-05-31.html

External Source: MANDRIVA

Name: MDKSA-2006:150

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

External Source: MANDRIVA

Name: MDKSA-2006:123

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:123

External Source: DEBIAN

Name: DSA-1103

Hyperlink:http://www.debian.org/security/2006/dsa-1103

External Source: DEBIAN

Name: DSA-1097

Hyperlink:http://www.debian.org/security/2006/dsa-1097

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

External Source: SECUNIA

Name: 21745

Hyperlink:http://secunia.com/advisories/21745

External Source: SECUNIA

Name: 21476

Hyperlink:http://secunia.com/advisories/21476

External Source: SECUNIA

Name: 21045

Hyperlink:http://secunia.com/advisories/21045

External Source: SECUNIA

Name: 20914

Hyperlink:http://secunia.com/advisories/20914

External Source: SECUNIA

Name: 20716

Hyperlink:http://secunia.com/advisories/20716

External Source: SECUNIA

Name: 20671

Hyperlink:http://secunia.com/advisories/20671

External Source: SECUNIA

Name: 20398

Hyperlink:http://secunia.com/advisories/20398

External Source: SECUNIA

Name: 20237

Hyperlink:http://secunia.com/advisories/20237

References to Check Content

Identifier:oval:org.mitre.oval:def:9531

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9531