Bug 242706 (CVE-2008-4576)

Summary:	Kernel: <2.6.25.18 sctp DOS via INIT-ACK (CVE-2008-4576)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel, kfm
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=bb5168ca75d488ee10e4653ddbf4cd51a57707f3
Whiteboard:	[linux <2.6.25.18]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2008-10-19 03:38:13 UTC

CVE-2008-4576 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4576):
  sctp in Linux kernel before 2.6.25.18 allows remote attackers to
  cause a denial of service (OOPS) via an INIT-ACK that states the peer
  does not support AUTH, which causes the sctp_process_init function to
  clean up active transports and triggers the OOPS when the T1-Init
  timer expires.

Comment 1 kfm 2008-10-19 15:18:09 UTC

Removing hardened; it's already incorporated in hardened-sources-2.6.25-r8, which is keyworded stable for all arches that the herd is able to test for (x86/amd64/ppc).