Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 132314 - Kernel: Remote DoS through SCTP Netfilter (CVE-2006-1527)
Summary: Kernel: Remote DoS through SCTP Netfilter (CVE-2006-1527)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://git.kernel.org/?p=linux/kernel...
Whiteboard: [linux <2.6.16.13]
Keywords:
Depends on:
Blocks:
 
Reported: 2006-05-05 00:22 UTC by Jakub Moc (RETIRED)
Modified: 2009-07-29 20:31 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jakub Moc (RETIRED) gentoo-dev 2006-05-05 00:22:51 UTC 
Description:
A vulnerability has been reported in Linux Kernel, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to missing checks on SCTP chunk sizes in the SCTP-netfilter code and may result in an infinite loop exhausting system resources.

Solution:
Update to version 2.6.16.13 or later.
http://kernel.org/

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13
Comment 1 Tim Yamin (RETIRED) gentoo-dev 2006-05-18 13:31:29 UTC 
Fixed in genpatches 2.6.16-9. Maintainers please bump:

hardened-sources: johnm, hardened
sh-sources: vapier (this is your bump reminder :P)
suspend2-sources: brix
xbox,xen-sources: chrb
Comment 2 Henrik Brix Andersen 2006-05-18 14:21:36 UTC 
Fixed in sys-kernel/suspend2-sources-2.6.16-r6.
Comment 3 Tim Yamin (RETIRED) gentoo-dev 2006-06-24 11:49:16 UTC 
All fixed, closing. vapier please bump sh-sources.