National Cyber Awareness System

Vulnerability Summary for CVE-2007-2876

Overview

The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2007-2105

Hyperlink:http://www.vupen.com/english/advisories/2007/2105

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4

External Source: OVAL

Name: oval:org.mitre.oval:def:10116

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10116

External Source: OSVDB

Name: 37112

Hyperlink:http://osvdb.org/37112

External Source: MLIST

Name: [linux-kernel] 20070608 Linux 2.6.21.4

Hyperlink:http://marc.info/?l=linux-kernel&m=118128622431272&w=2

External Source: MLIST

Name: [linux-kernel] 20070608 Linux 2.6.20.13

Hyperlink:http://marc.info/?l=linux-kernel&m=118128610219959&w=2

External Source: XF

Name: kernel-sctpnew-dos(34777)

Hyperlink:http://xforce.iss.net/xforce/xfdb/34777

External Source: UBUNTU

Name: USN-510-1

Hyperlink:http://www.ubuntu.com/usn/usn-510-1

External Source: UBUNTU

Name: USN-489-1

Hyperlink:http://www.ubuntu.com/usn/usn-489-1

External Source: UBUNTU

Name: USN-486-1

Hyperlink:http://www.ubuntu.com/usn/usn-486-1

External Source: BID

Name: 24376

Hyperlink:http://www.securityfocus.com/bid/24376

External Source: REDHAT

Name: RHSA-2007:0705

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0705.html

External Source: SUSE

Name: SUSE-SA:2007:053

Hyperlink:http://www.novell.com/linux/security/advisories/2007_53_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:051

Hyperlink:http://www.novell.com/linux/security/advisories/2007_51_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:043

Hyperlink:http://www.novell.com/linux/security/advisories/2007_43_kernel.html

External Source: MANDRIVA

Name: MDKSA-2007:196

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

External Source: MANDRIVA

Name: MDKSA-2007:171

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

External Source: DEBIAN

Name: DSA-1356

Hyperlink:http://www.debian.org/security/2007/dsa-1356

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm

External Source: SECUNIA

Name: 27227

Hyperlink:http://secunia.com/advisories/27227

External Source: SECUNIA

Name: 26760

Hyperlink:http://secunia.com/advisories/26760

External Source: SECUNIA

Name: 26664

Hyperlink:http://secunia.com/advisories/26664

External Source: SECUNIA

Name: 26620

Hyperlink:http://secunia.com/advisories/26620

External Source: SECUNIA

Name: 26450

Hyperlink:http://secunia.com/advisories/26450

External Source: SECUNIA

Name: 26289

Hyperlink:http://secunia.com/advisories/26289

External Source: SECUNIA

Name: 26139

Hyperlink:http://secunia.com/advisories/26139

External Source: SECUNIA

Name: 26133

Hyperlink:http://secunia.com/advisories/26133

External Source: SECUNIA

Name: 25961

Hyperlink:http://secunia.com/advisories/25961

External Source: SECUNIA

Name: 25838

Hyperlink:http://secunia.com/advisories/25838

External Source: REDHAT

Name: RHSA-2007:0488

Hyperlink:http://rhn.redhat.com/errata/RHSA-2007-0488.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10116

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10116