NVD

Id
4392  
Name
CVE-2008-4576  
Description
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-10-15  
Modified Date
2012-10-29  
Seq
2008-4576  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27748 4392 CVE-2008-4576 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18  View
27749 4392 CVE-2008-4576 SUSE-SA:2008:052  View
27750 4392 CVE-2008-4576 SUSE-SA:2008:053  View
27751 4392 CVE-2008-4576 SUSE-SR:2008:025  View
27752 4392 CVE-2008-4576 oval:org.mitre.oval:def:9822  View
27753 4392 CVE-2008-4576 [oss-security] 20081008 CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn"t support AUTH  View
27754 4392 CVE-2008-4576 DSA-1681  View
27755 4392 CVE-2008-4576 DSA-1687  View
27756 4392 CVE-2008-4576 [linux-kernel] 20081006 [patch 58/71] sctp: Fix oops when INIT-ACK indicates that peer doesnt support AUTH  View
27757 4392 CVE-2008-4576 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.27-rc6-git6.log  View
27758 4392 CVE-2008-4576 RHSA-2008:1017  View
27759 4392 CVE-2008-4576 RHSA-2009:0009  View
27760 4392 CVE-2008-4576 31634  View
27761 4392 CVE-2008-4576 USN-679-1  View
27762 4392 CVE-2008-4576 linux-kernel-sctp-initack-dos(45773)  View
27763 4392 CVE-2008-4576 FEDORA-2008-8980  View
27764 4392 CVE-2008-4576 FEDORA-2008-8929  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46934 JVNDB-2008-002244 Linux kernel の sctp におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の sctp には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-4576 34689 CVE-2008-4576 4392 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002244.html 2008-10-15 2009-02-04 View