NVD

Id
4432  
Name
CVE-2008-4618  
Description
The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-10-20  
Modified Date
2012-03-19  
Seq
2008-4618  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27963 4432 CVE-2008-4618 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=ba0166708ef4da7eeb61dd92bbba4d5a749d6561  View
27964 4432 CVE-2008-4618 SUSE-SA:2008:053  View
27965 4432 CVE-2008-4618 DSA-1681  View
27966 4432 CVE-2008-4618 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27  View
27967 4432 CVE-2008-4618 [oss-security] 20081006 CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter  View
27968 4432 CVE-2008-4618 RHSA-2009:0009  View
27969 4432 CVE-2008-4618 31848  View
27970 4432 CVE-2008-4618 USN-679-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49650 JVNDB-2008-004960 Linux kernel の sctp 実装におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の Stream Control Transmission Protocol (sctp) 実装は、パラメータが無効な長さを持つプロトコル違反を適切に処理しないため、サービス運用妨害 (パニック) 状態となる脆弱性が存在します。 CVE-2008-4618 34731 CVE-2008-4618 4432 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004960.html 2008-10-20 2012-09-25 View