7.8
CVE-2008-4618
- EPSS 2.66%
- Veröffentlicht 21.10.2008 00:10:53
- Zuletzt bearbeitet 16.06.2026 22:58:10
- CVE-Watchlists
- Unerledigt
LoginThe Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 2.6.26.5
Linux ≫ Linux Kernel Version2.2.27
Linux ≫ Linux Kernel Version2.4.36
Linux ≫ Linux Kernel Version2.4.36.1
Linux ≫ Linux Kernel Version2.4.36.2
Linux ≫ Linux Kernel Version2.4.36.3
Linux ≫ Linux Kernel Version2.4.36.4
Linux ≫ Linux Kernel Version2.4.36.5
Linux ≫ Linux Kernel Version2.4.36.6
Linux ≫ Linux Kernel Version2.6
Linux ≫ Linux Kernel Version2.6.18
Linux ≫ Linux Kernel Version2.6.18 Updaterc1
Linux ≫ Linux Kernel Version2.6.18 Updaterc2
Linux ≫ Linux Kernel Version2.6.18 Updaterc3
Linux ≫ Linux Kernel Version2.6.18 Updaterc4
Linux ≫ Linux Kernel Version2.6.18 Updaterc5
Linux ≫ Linux Kernel Version2.6.18 Updaterc6
Linux ≫ Linux Kernel Version2.6.18 Updaterc7
Linux ≫ Linux Kernel Version2.6.19.4
Linux ≫ Linux Kernel Version2.6.19.5
Linux ≫ Linux Kernel Version2.6.19.6
Linux ≫ Linux Kernel Version2.6.19.7
Linux ≫ Linux Kernel Version2.6.20.16
Linux ≫ Linux Kernel Version2.6.20.17
Linux ≫ Linux Kernel Version2.6.20.18
Linux ≫ Linux Kernel Version2.6.20.19
Linux ≫ Linux Kernel Version2.6.20.20
Linux ≫ Linux Kernel Version2.6.20.21
Linux ≫ Linux Kernel Version2.6.21.5
Linux ≫ Linux Kernel Version2.6.21.6
Linux ≫ Linux Kernel Version2.6.21.7
Linux ≫ Linux Kernel Version2.6.22
Linux ≫ Linux Kernel Version2.6.22.1
Linux ≫ Linux Kernel Version2.6.22.2
Linux ≫ Linux Kernel Version2.6.22.8
Linux ≫ Linux Kernel Version2.6.22.9
Linux ≫ Linux Kernel Version2.6.22.10
Linux ≫ Linux Kernel Version2.6.22.11
Linux ≫ Linux Kernel Version2.6.22.12
Linux ≫ Linux Kernel Version2.6.22.13
Linux ≫ Linux Kernel Version2.6.22.14
Linux ≫ Linux Kernel Version2.6.22.15
Linux ≫ Linux Kernel Version2.6.22.17
Linux ≫ Linux Kernel Version2.6.22.18
Linux ≫ Linux Kernel Version2.6.22.19
Linux ≫ Linux Kernel Version2.6.22.20
Linux ≫ Linux Kernel Version2.6.22.21
Linux ≫ Linux Kernel Version2.6.22.22
Linux ≫ Linux Kernel Version2.6.22_rc1
Linux ≫ Linux Kernel Version2.6.22_rc7
Linux ≫ Linux Kernel Version2.6.23
Linux ≫ Linux Kernel Version2.6.23.8
Linux ≫ Linux Kernel Version2.6.23.9
Linux ≫ Linux Kernel Version2.6.23.10
Linux ≫ Linux Kernel Version2.6.23.11
Linux ≫ Linux Kernel Version2.6.23.12
Linux ≫ Linux Kernel Version2.6.23.13
Linux ≫ Linux Kernel Version2.6.23.15
Linux ≫ Linux Kernel Version2.6.23.16
Linux ≫ Linux Kernel Version2.6.23.17
Linux ≫ Linux Kernel Version2.6.23_rc1
Linux ≫ Linux Kernel Version2.6.24
Linux ≫ Linux Kernel Version2.6.24.1
Linux ≫ Linux Kernel Version2.6.24.2
Linux ≫ Linux Kernel Version2.6.24.3
Linux ≫ Linux Kernel Version2.6.24.4
Linux ≫ Linux Kernel Version2.6.24.5
Linux ≫ Linux Kernel Version2.6.24.6
Linux ≫ Linux Kernel Version2.6.24.7
Linux ≫ Linux Kernel Version2.6.24_rc1
Linux ≫ Linux Kernel Version2.6.24_rc4
Linux ≫ Linux Kernel Version2.6.24_rc5
Linux ≫ Linux Kernel Version2.6.25
Linux ≫ Linux Kernel Version2.6.25 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.1
Linux ≫ Linux Kernel Version2.6.25.1 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.2
Linux ≫ Linux Kernel Version2.6.25.2 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.3
Linux ≫ Linux Kernel Version2.6.25.3 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.4
Linux ≫ Linux Kernel Version2.6.25.4 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.5
Linux ≫ Linux Kernel Version2.6.25.5 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.6
Linux ≫ Linux Kernel Version2.6.25.6 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.7
Linux ≫ Linux Kernel Version2.6.25.7 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.8
Linux ≫ Linux Kernel Version2.6.25.8 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.9
Linux ≫ Linux Kernel Version2.6.25.9 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.10
Linux ≫ Linux Kernel Version2.6.25.10 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.11
Linux ≫ Linux Kernel Version2.6.25.11 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.12
Linux ≫ Linux Kernel Version2.6.25.12 Editionx86_64
Linux ≫ Linux Kernel Version2.6.25.13
Linux ≫ Linux Kernel Version2.6.25.14
Linux ≫ Linux Kernel Version2.6.25.15
Linux ≫ Linux Kernel Version2.6.25.16
Linux ≫ Linux Kernel Version2.6.25.17
Linux ≫ Linux Kernel Version2.6.26
Linux ≫ Linux Kernel Version2.6.26 Updaterc4
Linux ≫ Linux Kernel Version2.6.26.1
Linux ≫ Linux Kernel Version2.6.26.2
Linux ≫ Linux Kernel Version2.6.26.3
Linux ≫ Linux Kernel Version2.6.26.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.66% | 0.837 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://secunia.com/advisories/32918
http://www.ubuntu.com/usn/usn-679-1
http://secunia.com/advisories/33586
http://www.redhat.com/support/errata/RHSA-2009-0009.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
http://secunia.com/advisories/32998
http://www.debian.org/security/2008/dsa-1681
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=ba0166708ef4da7eeb61dd92bbba4d5a749d6561
http://www.openwall.com/lists/oss-security/2008/10/06/1
http://www.securityfocus.com/bid/31848