National Cyber Awareness System

Vulnerability Summary for CVE-2006-2934

Overview

SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#717844

Name: VU#717844

Hyperlink:http://www.kb.cert.org/vuls/id/717844

External Source: CONFIRM

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387

External Source: CONFIRM

Name: http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9

Type: Patch Information

Hyperlink:http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-488

Hyperlink:https://issues.rpath.com/browse/RPL-488

External Source: VUPEN

Name: ADV-2006-2623

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2623

External Source: UBUNTU

Name: USN-346-1

Hyperlink:http://www.ubuntu.com/usn/usn-346-1

External Source: UBUNTU

Name: USN-331-1

Hyperlink:http://www.ubuntu.com/usn/usn-331-1

External Source: BID

Name: 18755

Hyperlink:http://www.securityfocus.com/bid/18755

External Source: BUGTRAQ

Name: 20060707 rPSA-2006-0122-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/439483/100/100/threaded

External Source: BUGTRAQ

Name: 20060710 Re: rPSA-2006-0122-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/439610/100/100/threaded

External Source: REDHAT

Name: RHSA-2006:0575

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0575.html

External Source: OSVDB

Name: 26963

Hyperlink:http://www.osvdb.org/26963

External Source: SUSE

Name: SUSE-SA:2006:047

Hyperlink:http://www.novell.com/linux/security/advisories/2006_47_kernel.html

External Source: SUSE

Name: SUSE-SA:2006:042

Hyperlink:http://www.novell.com/linux/security/advisories/2006_42_kernel.html

External Source: MANDRIVA

Name: MDKSA-2006:151

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:151

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

External Source: SECUNIA

Name: 22417

Type: Advisory

Hyperlink:http://secunia.com/advisories/22417

External Source: SECUNIA

Name: 21934

Type: Advisory

Hyperlink:http://secunia.com/advisories/21934

External Source: SECUNIA

Name: 21614

Type: Advisory

Hyperlink:http://secunia.com/advisories/21614

External Source: SECUNIA

Name: 21498

Type: Advisory

Hyperlink:http://secunia.com/advisories/21498

External Source: SECUNIA

Name: 21465

Type: Advisory

Hyperlink:http://secunia.com/advisories/21465

External Source: SECUNIA

Name: 21298

Type: Advisory

Hyperlink:http://secunia.com/advisories/21298

External Source: SECUNIA

Name: 21179

Type: Advisory

Hyperlink:http://secunia.com/advisories/21179

External Source: SECUNIA

Name: 20986

Type: Advisory

Hyperlink:http://secunia.com/advisories/20986

External Source: SECUNIA

Name: 20917

Type: Advisory

Hyperlink:http://secunia.com/advisories/20917

External Source: OVAL

Name: oval:org.mitre.oval:def:10932

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10932

References to Check Content

Identifier:oval:org.mitre.oval:def:10932

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10932