CVE-2006-2274
- State
- Published
- Severity
- Not scored
- Published
- May 9, 2006
- Updated
- Aug 7, 2024
- Reserved
- May 9, 2006
Description
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
- RHSA-2006:0493vendor-advisory
- ADV-2006-2554vdb-entry
- 17955vdb-entry
- 20716third-party-advisory
- 21476third-party-advisory
- 21745third-party-advisory
- MDKSA-2006:150vendor-advisory
- USN-302-1vendor-advisory
- MDKSA-2006:123vendor-advisory
- DSA-1097vendor-advisory
- SUSE-SA:2006:028vendor-advisory
- http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6
- 2006-0026vendor-advisory
- DSA-1103vendor-advisory
- linux-sctp-skb-pull-dos(26432)vdb-entry
- 21045third-party-advisory
- 20237third-party-advisory
- 20398third-party-advisory
- 25746vdb-entry
- oval:org.mitre.oval:def:9531vdb-entrysignature
- 20671third-party-advisory
- 20914third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.