Linux Kernel SCTP Socket SO_LINGER Option Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1016992
|
|
SecurityTracker URL: http://securitytracker.com/id?1016992
|
|
CVE Reference: CVE-2006-4535
(Links to External Site)
|
Date: Oct 5 2006
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.6.17.10, 2.6.17.11, 2.6.18-rc5
|
Description: A vulnerability was reported in the Linux Kernel. A local user can cause denial of service conditions.
A local user can open an SCTP socket with a specially crafted SO_LINGER value to cause a kernel crash.
|
Impact: A local user can cause a kernel crash.
|
Solution: No solution was available at the time of this entry.
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: Input validation error
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Thu, 5 Oct 2006 16:13:27 -0400
Subject: Linux kernel vulnerability
|
CVE-2006-4535:
The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a
denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly
related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux
distributions are also affected, due to backporting of the CVE-2006-3745 patch.
|
|
