kernel: sctp remote denial of service
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | |||
| kernel-0:2.6.9-89.0.23.EL | cpe:/o:redhat:enterprise_linux:4 | RHSA-2010:0146 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Linux 4.7 Z Stream | |||
| kernel-0:2.6.9-78.0.30.EL | cpe:/o:redhat:rhel_eus:4.7 | RHSA-2010:0342 | 2010-04-06T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| kernel-0:2.6.18-164.15.1.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2010:0147 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Linux 5.2 Z Stream | |||
| kernel-0:2.6.18-92.1.38.el5 | cpe:/o:redhat:rhel_eus:5.2 | RHSA-2010:0148 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Linux 5.3.Z - Server Only | |||
| kernel-0:2.6.18-128.14.1.el5 | cpe:/o:redhat:rhel_eus:5.3 | RHSA-2010:0149 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Virtualization for RHEL-5 | |||
| rhev-hypervisor-0:5.4-2.1.10.el5_4rhev2_1 | cpe:/o:redhat:enterprise_linux:5::hypervisor | RHSA-2010:0172 | 2010-03-24T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-0040 | The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length. |
Ubuntu USN |
USN-947-1 | Linux kernel vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 4.5% (4.483% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.