CVE-2006-2274

Description

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 7.33% Top 10%

Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory trustix.org Vendor Advisory debian.org

Affected: n/a n/a

References

Link	Tags
http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
http://www.redhat.com/support/errata/RHSA-2006-0493.html	vendor advisory
http://www.vupen.com/english/advisories/2006/2554	vdb entry
http://www.securityfocus.com/bid/17955	vdb entry
http://secunia.com/advisories/20716	third party advisory
http://secunia.com/advisories/21476	third party advisory
http://secunia.com/advisories/21745	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:150	vendor advisory
http://www.ubuntu.com/usn/usn-302-1	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:123	vendor advisory
http://www.debian.org/security/2006/dsa-1097	vendor advisory
http://www.novell.com/linux/security/advisories/2006-05-31.html	vendor advisory
http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6
http://www.trustix.org/errata/2006/0026	vendor advisory
http://www.debian.org/security/2006/dsa-1103	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26432	vdb entry
http://secunia.com/advisories/21045	third party advisory
http://secunia.com/advisories/20237	third party advisory
http://secunia.com/advisories/20398	third party advisory
http://www.osvdb.org/25746	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9531	signature vdb entry
http://secunia.com/advisories/20671	third party advisory
http://secunia.com/advisories/20914	third party advisory

Frequently Asked Questions

What is the severity of CVE-2006-2274?: CVE-2006-2274 has been scored as a medium severity vulnerability.
How to fix CVE-2006-2274?: To fix CVE-2006-2274, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-2274 being actively exploited in the wild?: It is possible that CVE-2006-2274 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~7% probability that this vulnerability will be exploited by malicious actors in the next 30 days.