CVE-2008-3526
27.08.2008, 20:41
Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 2.6.24 |
| linux | linux_kernel | 2.6.24:rc2 |
| linux | linux_kernel | 2.6.24:rc3 |
| linux | linux_kernel | 2.6.24.1 |
| linux | linux_kernel | 2.6.24.2 |
| linux | linux_kernel | 2.6.24.3 |
| linux | linux_kernel | 2.6.24.4 |
| linux | linux_kernel | 2.6.24.5 |
| linux | linux_kernel | 2.6.24.6 |
| linux | linux_kernel | 2.6.24.7 |
| linux | linux_kernel | 2.6.24_rc1:_rc1 |
| linux | linux_kernel | 2.6.24_rc4:_rc4 |
| linux | linux_kernel | 2.6.24_rc5:_rc5 |
| linux | linux_kernel | 2.6.25 |
| linux | linux_kernel | 2.6.25.1 |
| linux | linux_kernel | 2.6.25.2 |
| linux | linux_kernel | 2.6.25.3 |
| linux | linux_kernel | 2.6.25.4 |
| linux | linux_kernel | 2.6.25.5 |
| linux | linux_kernel | 2.6.25.6 |
| linux | linux_kernel | 2.6.25.7 |
| linux | linux_kernel | 2.6.25.8 |
| linux | linux_kernel | 2.6.25.9 |
| linux | linux_kernel | 2.6.25.10 |
| linux | linux_kernel | 2.6.25.11 |
| linux | linux_kernel | 2.6.25.12 |
| linux | linux_kernel | 2.6.25.13 |
| linux | linux_kernel | 2.6.25.14 |
| linux | linux_kernel | 2.6.25.15 |
| linux | linux_kernel | 2.6.26 |
| linux | linux_kernel | 2.6.26.1 |
| linux | linux_kernel | 2.6.26.2 |
| linux | linux_kernel | 2.6.26.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References