CVE-2013-2206

kernel: sctp: duplicate cookie handling NULL pointer dereference

Published Jul 4, 2013 CVSS 2.0 · 5.4 Medium EPSS 4.7% KEV · Not listed
Description
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2766-1 linux-2.6 security update
EUVD EUVD EUVD-2013-2161 The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.
Ubuntu USN Ubuntu USN USN-1809-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1811-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1812-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1813-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1814-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1939-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1940-1 Linux kernel (EC2) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:27 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Jul 4, 2013, 9:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Important
Public date
Mar 13, 2013, 12:00 AM