Search vulnerabilities

Results 4

Export CSV
CVE-2006-2271

security flaw

The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.

CVSS 2.0 · 7.8 High EPSS 4.4% KEV · Not listed
Vendors
CVE-2006-2274

security flaw

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed
Vendors