Bug 185449

Summary:	Kernel: remotely triggerable NULL ptr dereference (CVE-2007-2876)
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2007-07-15 19:49:11 UTC

Not sure wether this was already reported...

The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.

Comment 1 Matt Drew (RETIRED) gentoo-dev

2007-07-16 17:49:23 UTC

Yep, already in the system - thanks though!

*** This bug has been marked as a duplicate of bug 181647 ***