CVE - CVE-2006-1527

CVE-ID
CVE-2006-1527	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown vectors that cause an invalid SCTP chunk size to be processed by the for_each_sctp_chunk function.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:17806 URL:http://www.securityfocus.com/bid/17806 MISC:19926 URL:http://secunia.com/advisories/19926 MISC:2006-0024 URL:~~http://www.trustix.org/errata/2006/0024~~ (Obsolete source - check if archived by the Wayback Machine) MISC:20157 URL:http://secunia.com/advisories/20157 MISC:20237 URL:http://secunia.com/advisories/20237 MISC:20398 URL:http://secunia.com/advisories/20398 MISC:20716 URL:http://secunia.com/advisories/20716 MISC:21745 URL:http://secunia.com/advisories/21745 MISC:25229 URL:~~http://www.osvdb.org/25229~~ (Obsolete source) MISC:ADV-2006-1632 URL:~~http://www.vupen.com/english/advisories/2006/1632~~ (Obsolete source) MISC:MDKSA-2006:086 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:086~~ (Obsolete source) MISC:RHSA-2006:0493 URL:http://www.redhat.com/support/errata/RHSA-2006-0493.html MISC:SUSE-SA:2006:028 URL:http://www.novell.com/linux/security/advisories/2006-05-31.html MISC:USN-302-1 URL:http://www.ubuntu.com/usn/usn-302-1 MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm MISC:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13 URL:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13 MISC:linux-sctp-netfilter-dos(26194) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/26194 MISC:oval:org.mitre.oval:def:10373 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10373
Assigning CNA
Red Hat, Inc.
Date Record Created
20060330	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060330)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)