CVE-2006-2274 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-2274
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2274

Description: Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26432 UBUNTU http://www.ubuntu.com/usn/usn-302-1 TRUSTIX http://www.trustix.org/errata/2006/0026 SUSE http://www.novell.com/linux/security/advisories/2006-05-31.html SAID Secunia Advisory: SA20237 Secunia Advisory: SA20671 Secunia Advisory: SA20716 Secunia Advisory: SA20914 Secunia Advisory: SA21045 Secunia Advisory: SA21745 Secunia Advisory: SA20398 Secunia Advisory: SA21476 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0493.html OSVDB 25746 MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:150 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:123 DEBIAN http://www.debian.org/security/2006/dsa-1103 http://www.debian.org/security/2006/dsa-1097 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6 BID 17955

Return to the previous page.