NVD

Id
60563  
Name
CVE-2006-1858  
Description
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2006-05-22  
Modified Date
2011-03-07  
Seq
2006-1858  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
312396 60563 CVE-2006-1858 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17  View
312397 60563 CVE-2006-1858 oval:org.mitre.oval:def:9510  View
312398 60563 CVE-2006-1858 http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm  View
312399 60563 CVE-2006-1858 DSA-1097  View
312400 60563 CVE-2006-1858 DSA-1103  View
312401 60563 CVE-2006-1858 MDKSA-2006:123  View
312402 60563 CVE-2006-1858 MDKSA-2006:150  View
312403 60563 CVE-2006-1858 SUSE-SA:2006:042  View
312404 60563 CVE-2006-1858 SUSE-SA:2006:047  View
312405 60563 CVE-2006-1858 RHSA-2006:0617  View
312406 60563 CVE-2006-1858 18085  View
312407 60563 CVE-2006-1858 USN-302-1  View
312408 60563 CVE-2006-1858 ADV-2006-1893  View
312409 60563 CVE-2006-1858 ADV-2006-2554  View
312410 60563 CVE-2006-1858 linux-sctp-parameter-dos(26585)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58104 JVNDB-2006-000300 Linux Kernel の SCTP プロトコルにおける整数オーバフローの脆弱性 Linux Kernel の SCTP プロトコルの実装には、SCTP パラメータに対するチェックを行う際、実際のチャンク長およびパラメータ長ではなく、近似値を用いるため、近似値と実際の値に誤差が生じた場合に整数オーバーフローが発生する脆弱性が存在します。 CVE-2006-1858 17960 CVE-2006-1858 60563 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000300.html 2006-05-22 2007-04-01 View