NVD

Id
60977  
Name
CVE-2006-2274  
Description
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-05-09  
Modified Date
2011-03-07  
Seq
2006-2274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
314906 60977 CVE-2006-2274 http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6  View
314907 60977 CVE-2006-2274 oval:org.mitre.oval:def:9531  View
314908 60977 CVE-2006-2274 http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm  View
314909 60977 CVE-2006-2274 DSA-1097  View
314910 60977 CVE-2006-2274 DSA-1103  View
314911 60977 CVE-2006-2274 MDKSA-2006:123  View
314912 60977 CVE-2006-2274 MDKSA-2006:150  View
314913 60977 CVE-2006-2274 SUSE-SA:2006:028  View
314914 60977 CVE-2006-2274 RHSA-2006:0493  View
314915 60977 CVE-2006-2274 17955  View
314916 60977 CVE-2006-2274 2006-0026  View
314917 60977 CVE-2006-2274 USN-302-1  View
314918 60977 CVE-2006-2274 ADV-2006-2554  View
314919 60977 CVE-2006-2274 linux-sctp-skb-pull-dos(26432)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57969 JVNDB-2006-000165 Linux Kernel の sctp_skb_pull() 関数におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2006-2274 18376 CVE-2006-2274 60977 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000165.html 2006-04-10 2007-04-01 View