NVD

Id
61618  
Name
CVE-2006-2934  
Description
SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-06-30  
Modified Date
2012-03-19  
Seq
2006-2934  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318765 61618 CVE-2006-2934 oval:org.mitre.oval:def:10932  View
318766 61618 CVE-2006-2934 http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm  View
318767 61618 CVE-2006-2934 VU#717844  View
318768 61618 CVE-2006-2934 http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9  View
318769 61618 CVE-2006-2934 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23  View
318770 61618 CVE-2006-2934 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3  View
318771 61618 CVE-2006-2934 MDKSA-2006:151  View
318772 61618 CVE-2006-2934 SUSE-SA:2006:042  View
318773 61618 CVE-2006-2934 SUSE-SA:2006:047  View
318774 61618 CVE-2006-2934 RHSA-2006:0575  View
318775 61618 CVE-2006-2934 20060710 Re: rPSA-2006-0122-1 kernel  View
318776 61618 CVE-2006-2934 20060707 rPSA-2006-0122-1 kernel  View
318777 61618 CVE-2006-2934 18755  View
318778 61618 CVE-2006-2934 USN-331-1  View
318779 61618 CVE-2006-2934 USN-346-1  View
318780 61618 CVE-2006-2934 ADV-2006-2623  View
318781 61618 CVE-2006-2934 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387  View
318782 61618 CVE-2006-2934 https://issues.rpath.com/browse/RPL-488  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58167 JVNDB-2006-000363 Linux Kernel の Netfilter の SCTP コネクション追跡モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の Netfilter で使用される SCTP コネクション追跡モジュール (ip_conntrack_proto_sctp.c, nf_conntrack_proto_sctp.c) において、newconntrack 変数の処理が不適切なため、チャンクデータが付加されていないパケットを処理した場合に境界エラーが発生する脆弱性が存在します。 CVE-2006-2934 19036 CVE-2006-2934 61618 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000363.html 2006-06-30 2007-04-01 View