CVE-2010-0008 - kernel: sctp remote denial of service

Back Back to CVE browser

HIGH

kernel: sctp remote denial of service

Published Mar 19, 2010

7.8

HIGH

CVSS 2.0

EPSS 4.48%

Description

The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.

Affected products

Red Hat Enterprise Linux 4

kernel-0:2.6.9-89.0.23.EL

Fixed · RHSA-2010:0146
Red Hat Enterprise Linux 4.7 Z Stream

kernel-0:2.6.9-78.0.30.EL

Fixed · RHSA-2010:0342
Red Hat Enterprise Linux 5

kernel-0:2.6.18-164.15.1.el5

Fixed · RHSA-2010:0147
Red Hat Enterprise Linux 5.2 Z Stream

kernel-0:2.6.18-92.1.38.el5

Fixed · RHSA-2010:0148
Red Hat Enterprise Linux 5.3.Z - Server Only

kernel-0:2.6.18-128.14.1.el5

Fixed · RHSA-2010:0149
Red Hat Enterprise Virtualization for RHEL-5

rhev-hypervisor-0:5.4-2.1.10.el5_4rhev2_1

Fixed · RHSA-2010:0172

Product	Package	State	Advisory
Red Hat Enterprise Linux 4	kernel-0:2.6.9-89.0.23.EL	Fixed	RHSA-2010:0146
Red Hat Enterprise Linux 4.7 Z Stream	kernel-0:2.6.9-78.0.30.EL	Fixed	RHSA-2010:0342
Red Hat Enterprise Linux 5	kernel-0:2.6.18-164.15.1.el5	Fixed	RHSA-2010:0147
Red Hat Enterprise Linux 5.2 Z Stream	kernel-0:2.6.18-92.1.38.el5	Fixed	RHSA-2010:0148
Red Hat Enterprise Linux 5.3.Z - Server Only	kernel-0:2.6.18-128.14.1.el5	Fixed	RHSA-2010:0149
Red Hat Enterprise Virtualization for RHEL-5	rhev-hypervisor-0:5.4-2.1.10.el5_4rhev2_1	Fixed	RHSA-2010:0172

Remediation

Red Hat statement

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3 as it did not include support for SCTP. It did not affect the version of Linux kernel as shipped with Red Hat Enterprise MRG as it has already had the fix to this issue.

Weaknesses (2)

CWE-399

CWE-770

Allocation of Resources Without Limits

References (15)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8
x_refsource_CONFIRM
http://secunia.com/advisories/39295
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/43315
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2010/03/17/2
mailing-listx_refsource_MLISTPatch
http://www.redhat.com/support/errata/RHSA-2010-0147.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2010-0342.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/516397/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2010-0008
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=555658
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2010-0008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11160
vdb-entrysignaturex_refsource_OVAL
https://rhn.redhat.com/errata/RHSA-2010-0146.html
vendor-advisoryx_refsource_REDHAT
https://www.cve.org/CVERecord?id=CVE-2010-0008

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8		x_refsource_CONFIRM
http://secunia.com/advisories/39295		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/43315		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2010/03/17/2		mailing-listx_refsource_MLISTPatch
http://www.redhat.com/support/errata/RHSA-2010-0147.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2010-0342.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/516397/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vmware.com/security/advisories/VMSA-2011-0003.html		x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2010-0008		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=555658		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2010-0008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11160		vdb-entrysignaturex_refsource_OVAL
https://rhn.redhat.com/errata/RHSA-2010-0146.html		vendor-advisoryx_refsource_REDHAT
https://www.cve.org/CVERecord?id=CVE-2010-0008