CVE-2006-2934
טרם דורגה
תיאור (מקור, אנגלית)
SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.
מדדים
- EPSS — סבירות ניצול
- 5% (אחוזון 100) נכון ל-23/9/2026
- CWE
- CWE-399
מוצרים מושפעים
linux: linux kernel
קישורים
- http://secunia.com/advisories/20917 Vendor Advisory
- http://secunia.com/advisories/20986 Vendor Advisory
- http://secunia.com/advisories/21179 Vendor Advisory
- http://secunia.com/advisories/21298 Vendor Advisory
- http://secunia.com/advisories/21465 Vendor Advisory
- http://secunia.com/advisories/21498 Vendor Advisory
- http://secunia.com/advisories/21614 Vendor Advisory
- http://secunia.com/advisories/21934 Vendor Advisory
- http://secunia.com/advisories/22417 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2623 Vendor Advisory