NVD

Id
2070  
Name
CVE-2008-2136  
Description
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-05-16  
Modified Date
2012-03-19  
Seq
2008-2136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13275 2070 CVE-2008-2136 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3  View
13276 2070 CVE-2008-2136 SUSE-SA:2008:030  View
13277 2070 CVE-2008-2136 SUSE-SA:2008:032  View
13278 2070 CVE-2008-2136 [linux-kernel] 20080509 Re: When should kfree_skb be used?  View
13279 2070 CVE-2008-2136 oval:org.mitre.oval:def:11038  View
13280 2070 CVE-2008-2136 oval:org.mitre.oval:def:6503  View
13281 2070 CVE-2008-2136 http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm  View
13282 2070 CVE-2008-2136 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169  View
13283 2070 CVE-2008-2136 DSA-1588  View
13284 2070 CVE-2008-2136 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5  View
13285 2070 CVE-2008-2136 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3  View
13286 2070 CVE-2008-2136 MDVSA-2008:167  View
13287 2070 CVE-2008-2136 MDVSA-2008:174  View
13288 2070 CVE-2008-2136 RHSA-2008:0585  View
13289 2070 CVE-2008-2136 RHSA-2008:0607  View
13290 2070 CVE-2008-2136 RHSA-2008:0612  View
13291 2070 CVE-2008-2136 RHSA-2008:0787  View
13292 2070 CVE-2008-2136 RHSA-2008:0973  View
13293 2070 CVE-2008-2136 29235  View
13294 2070 CVE-2008-2136 1020118  View
13295 2070 CVE-2008-2136 USN-625-1  View
13296 2070 CVE-2008-2136 ADV-2008-1543  View
13297 2070 CVE-2008-2136 ADV-2008-1716  View
13298 2070 CVE-2008-2136 linux-kernel-ipip6rcv-dos(42451)  View
13299 2070 CVE-2008-2136 FEDORA-2008-3949  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46264 JVNDB-2008-001574 Linux Kernel の ipip6_rcv 関数における SIT トンネルインターフェースに関するサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv6/sit.c には、ipip6_rcv 関数において、Simple Internet Transition (SIT) トンネルインターフェースへのネットワークトラフィックの処理に不備があり、メモリリークによる、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-2136 32249 CVE-2008-2136 2070 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001574.html 2008-05-16 2009-03-31 View