Detections
Analytics
Linux SCTP Functionality Multiple Remote DoS
high Nessus Plugin ID 21333
Language:
Synopsis
It is possible to crash the remote host by sending it a malformed SCTP packet.Description
There is a flaw in the Linux kernel on the remote host that causes a kernel panic when it receives an SCTP packet with a chunk data packet of length 0. An attacker can leverage this flaw to crash the remote host. Additionally, other types of crafted packets can cause a remote denial of service in various SCTP related functions.Note that successful exploitation of this issue requires that the kernel support SCTP protocol connection tracking.
Solution
Upgrade to Linux kernel 2.6.16.23 / 2.6.17.3 or later.See Also
http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024241.html
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3
Plugin Details
Severity: High
ID: 21333
File Name: linux_sctp_chunk_header_dos.nasl
Version: 1.25
Type: remote
Family: Denial of Service
Published: 5/9/2006
Updated: 7/14/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:linux:kernel
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 5/2/2006