Skip to main content
← All vulnerabilities
CVE-2006-2272

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 25

support.avaya.com

redhat.com

labs.musecurity.com

secunia.com

vupen.com

git.kernel.org

ubuntu.com

securityfocus.com

debian.org

novell.com

osvdb.org

archives.neohapsis.com

trustix.org

mandriva.com

exchange.xforce.ibmcloud.com