CVE-2010-0008

kernel: sctp remote denial of service

Published Mar 19, 2010 CVSS 2.0 · 7.8 High EPSS 4.5% KEV · Not listed
Description
The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-0040 The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.
Ubuntu USN Ubuntu USN USN-947-1 Linux kernel vulnerabilities
History

No history.

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-130

    Improper Handling of Length Parameter Inconsistency

  • CWE-399

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:30 AM
Reserved
Dec 14, 2009, 12:00 AM
Status
Modified
Published
Mar 19, 2010, 7:30 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Important
Public date
Mar 16, 2010, 12:00 AM