Showing 1 - 2 of 2

CVE-2008-3792

Status Candidate

Overview

net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.

Related Files

Ubuntu Security Notice 659-1: Posted Oct 28, 2008; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 659-1 - A massive amount of vulnerabilities related to the linux 2.6.15/22 kernels have been addressed and patched.; tags | advisory, kernel, vulnerability; systems | linux, ubuntu; advisories | CVE-2007-6716, CVE-2008-2372, CVE-2008-3276, CVE-2008-3525, CVE-2008-3526, CVE-2008-3534, CVE-2008-3535, CVE-2008-3792, CVE-2008-3915, CVE-2008-4113, CVE-2008-4445; SHA-256 | 624c24a6c8e809c114fc261003160921c84c9441a9e0b7253b052aab11fd50a5; Download | Favorite | View

TKADV2008-007.txt: Posted Sep 11, 2008; Authored by Tobias Klein | Site trapkit.de; The Linux Kernel versions 2.6.26.4 and below suffer from a information disclosure and NULL pointer dereference vulnerabilities in the SCTP-AUTH API.; tags | advisory, kernel, vulnerability, info disclosure; systems | linux; advisories | CVE-2008-3792; SHA-256 | 1513f3ac9e8e924633ed636d47f2117f4fb952ea02518f1b0c346466703bc3cd; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 217 files
Ubuntu 101 files
Debian 21 files
indoushka 18 files
Google Security Research 15 files
Gentoo 14 files
Mirabbas Agalarov 12 files
CraCkEr 9 files
Apple 9 files
Ivan Fratric 8 files

File Archives

Systems

AIX (428)
Apple (1,979)
BSD (373)
CentOS (57)
Cisco (1,920)
Debian (6,753)
Fedora (1,691)
FreeBSD (1,244)
Gentoo (4,321)
HPUX (879)
iOS (344)
iPhone (108)
IRIX (220)
Juniper (67)
Linux (45,783)
Mac OS X (685)
Mandriva (3,105)
NetBSD (256)
OpenBSD (482)
RedHat (13,311)
Slackware (941)
Solaris (1,610)
SUSE (1,444)
Ubuntu (8,633)
UNIX (9,237)
UnixWare (186)
Windows (6,555)
Other

CVE-2008-3792

Overview

Related Files

File Archive:

June 2023

Top Authors In Last 30 Days

File Tags

File Archives

Systems