NVD

Id
2720  
Name
CVE-2008-2826  
Description
Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-07-02  
Modified Date
2012-10-29  
Seq
2008-2826  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17368 2720 CVE-2008-2826 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=735ce972fbc8a65fb17788debd7bbe7b4383cc62  View
17369 2720 CVE-2008-2826 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9  View
17370 2720 CVE-2008-2826 SUSE-SA:2008:037  View
17371 2720 CVE-2008-2826 SUSE-SA:2008:052  View
17372 2720 CVE-2008-2826 http://lwn.net/Articles/287350/  View
17373 2720 CVE-2008-2826 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207  View
17374 2720 CVE-2008-2826 DSA-1630  View
17375 2720 CVE-2008-2826 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7  View
17376 2720 CVE-2008-2826 MDVSA-2008:167  View
17377 2720 CVE-2008-2826 MDVSA-2008:174  View
17378 2720 CVE-2008-2826 RHSA-2008:0585  View
17379 2720 CVE-2008-2826 29990  View
17380 2720 CVE-2008-2826 1020514  View
17381 2720 CVE-2008-2826 USN-625-1  View
17382 2720 CVE-2008-2826 ADV-2008-2511  View
17383 2720 CVE-2008-2826 linux-kernel-sctpgetsockopt-dos(43559)  View
17384 2720 CVE-2008-2826 https://issues.rpath.com/browse/RPL-2629  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46343 JVNDB-2008-001653 Linux kernel の sctp_getsockopt_local_addrs_old 関数における整数オーバーフローの脆弱性 Linux kernel の Stream Control Transmission Protocol (sctp) 機能 には net/sctp/socket.c の sctp_getsockopt_local_addrs_old 関数において addr_num フィールドの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-2826 32939 CVE-2008-2826 2720 4.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001653.html 2008-07-02 2008-12-19 View