7.8
CVE-2008-4618
- EPSS 2.66%
- Veröffentlicht 21.10.2008 00:10:53
- Zuletzt bearbeitet 16.06.2026 22:58:10
- Erkennungen
LoginThe Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 2.6.26.5
Linux ≫ Linux Kernel Version 2.2.27
Linux ≫ Linux Kernel Version 2.4.36
Linux ≫ Linux Kernel Version 2.4.36.1
Linux ≫ Linux Kernel Version 2.4.36.2
Linux ≫ Linux Kernel Version 2.4.36.3
Linux ≫ Linux Kernel Version 2.4.36.4
Linux ≫ Linux Kernel Version 2.4.36.5
Linux ≫ Linux Kernel Version 2.4.36.6
Linux ≫ Linux Kernel Version 2.6
Linux ≫ Linux Kernel Version 2.6.18
Linux ≫ Linux Kernel Version 2.6.18 Update rc1
Linux ≫ Linux Kernel Version 2.6.18 Update rc2
Linux ≫ Linux Kernel Version 2.6.18 Update rc3
Linux ≫ Linux Kernel Version 2.6.18 Update rc4
Linux ≫ Linux Kernel Version 2.6.18 Update rc5
Linux ≫ Linux Kernel Version 2.6.18 Update rc6
Linux ≫ Linux Kernel Version 2.6.18 Update rc7
Linux ≫ Linux Kernel Version 2.6.19.4
Linux ≫ Linux Kernel Version 2.6.19.5
Linux ≫ Linux Kernel Version 2.6.19.6
Linux ≫ Linux Kernel Version 2.6.19.7
Linux ≫ Linux Kernel Version 2.6.20.16
Linux ≫ Linux Kernel Version 2.6.20.17
Linux ≫ Linux Kernel Version 2.6.20.18
Linux ≫ Linux Kernel Version 2.6.20.19
Linux ≫ Linux Kernel Version 2.6.20.20
Linux ≫ Linux Kernel Version 2.6.20.21
Linux ≫ Linux Kernel Version 2.6.21.5
Linux ≫ Linux Kernel Version 2.6.21.6
Linux ≫ Linux Kernel Version 2.6.21.7
Linux ≫ Linux Kernel Version 2.6.22
Linux ≫ Linux Kernel Version 2.6.22.1
Linux ≫ Linux Kernel Version 2.6.22.2
Linux ≫ Linux Kernel Version 2.6.22.8
Linux ≫ Linux Kernel Version 2.6.22.9
Linux ≫ Linux Kernel Version 2.6.22.10
Linux ≫ Linux Kernel Version 2.6.22.11
Linux ≫ Linux Kernel Version 2.6.22.12
Linux ≫ Linux Kernel Version 2.6.22.13
Linux ≫ Linux Kernel Version 2.6.22.14
Linux ≫ Linux Kernel Version 2.6.22.15
Linux ≫ Linux Kernel Version 2.6.22.17
Linux ≫ Linux Kernel Version 2.6.22.18
Linux ≫ Linux Kernel Version 2.6.22.19
Linux ≫ Linux Kernel Version 2.6.22.20
Linux ≫ Linux Kernel Version 2.6.22.21
Linux ≫ Linux Kernel Version 2.6.22.22
Linux ≫ Linux Kernel Version 2.6.22_rc1
Linux ≫ Linux Kernel Version 2.6.22_rc7
Linux ≫ Linux Kernel Version 2.6.23
Linux ≫ Linux Kernel Version 2.6.23.8
Linux ≫ Linux Kernel Version 2.6.23.9
Linux ≫ Linux Kernel Version 2.6.23.10
Linux ≫ Linux Kernel Version 2.6.23.11
Linux ≫ Linux Kernel Version 2.6.23.12
Linux ≫ Linux Kernel Version 2.6.23.13
Linux ≫ Linux Kernel Version 2.6.23.15
Linux ≫ Linux Kernel Version 2.6.23.16
Linux ≫ Linux Kernel Version 2.6.23.17
Linux ≫ Linux Kernel Version 2.6.23_rc1
Linux ≫ Linux Kernel Version 2.6.24
Linux ≫ Linux Kernel Version 2.6.24.1
Linux ≫ Linux Kernel Version 2.6.24.2
Linux ≫ Linux Kernel Version 2.6.24.3
Linux ≫ Linux Kernel Version 2.6.24.4
Linux ≫ Linux Kernel Version 2.6.24.5
Linux ≫ Linux Kernel Version 2.6.24.6
Linux ≫ Linux Kernel Version 2.6.24.7
Linux ≫ Linux Kernel Version 2.6.24_rc1
Linux ≫ Linux Kernel Version 2.6.24_rc4
Linux ≫ Linux Kernel Version 2.6.24_rc5
Linux ≫ Linux Kernel Version 2.6.25
Linux ≫ Linux Kernel Version 2.6.25 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.1
Linux ≫ Linux Kernel Version 2.6.25.1 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.2
Linux ≫ Linux Kernel Version 2.6.25.2 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.3
Linux ≫ Linux Kernel Version 2.6.25.3 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.4
Linux ≫ Linux Kernel Version 2.6.25.4 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.5
Linux ≫ Linux Kernel Version 2.6.25.5 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.6
Linux ≫ Linux Kernel Version 2.6.25.6 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.7
Linux ≫ Linux Kernel Version 2.6.25.7 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.8
Linux ≫ Linux Kernel Version 2.6.25.8 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.9
Linux ≫ Linux Kernel Version 2.6.25.9 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.10
Linux ≫ Linux Kernel Version 2.6.25.10 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.11
Linux ≫ Linux Kernel Version 2.6.25.11 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.12
Linux ≫ Linux Kernel Version 2.6.25.12 Edition x86_64
Linux ≫ Linux Kernel Version 2.6.25.13
Linux ≫ Linux Kernel Version 2.6.25.14
Linux ≫ Linux Kernel Version 2.6.25.15
Linux ≫ Linux Kernel Version 2.6.25.16
Linux ≫ Linux Kernel Version 2.6.25.17
Linux ≫ Linux Kernel Version 2.6.26
Linux ≫ Linux Kernel Version 2.6.26 Update rc4
Linux ≫ Linux Kernel Version 2.6.26.1
Linux ≫ Linux Kernel Version 2.6.26.2
Linux ≫ Linux Kernel Version 2.6.26.3
Linux ≫ Linux Kernel Version 2.6.26.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.66% | 0.837 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://secunia.com/advisories/32918
http://www.ubuntu.com/usn/usn-679-1
http://secunia.com/advisories/33586
http://www.redhat.com/support/errata/RHSA-2009-0009.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
http://secunia.com/advisories/32998
http://www.debian.org/security/2008/dsa-1681
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=ba0166708ef4da7eeb61dd92bbba4d5a749d6561
http://www.openwall.com/lists/oss-security/2008/10/06/1
http://www.securityfocus.com/bid/31848