blob: 48b082a8dfd54d1281b86fab6f41e10c179024c5 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
Candidate: CVE-2006-1858
References:
http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=dd2d1c6f2958d027e4591ca5d2a04dfe36ca6512;hp=61c9fed41638249f8b6ca5345064eb1beb50179f
Description:
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a
denial of service (crash) and possibly execute arbitrary code via a chunk
length that is inconsistent with the actual length of provided parameters.
Notes:
dannf> Submitted to Marcello for 2.4
Bugs:
upstream: released (2.6.16.17)
linux-2.6: released (2.6.16-14)
2.6.8-sarge-security: released (2.6.8-16sarge3)
2.4.27-sarge-security: released (2.4.27-10sarge3)
2.4.19-woody-security: N/A
2.4.18-woody-security: N/A
2.4.17-woody-security: N/A
2.4.16-woody-security: N/A
2.4.17-woody-security-hppa: N/A
2.4.17-woody-security-ia64: N/A
|
