CVE-2010-1173

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

CVSS v2.0 NVD

7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

21.24% chance of exploitation in the next 30 days, 98th percentile

Published

2010-05-07

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14594

Security advisories

• http://article.gmane.org/gmane.linux.network/159531
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
• http://www.redhat.com/support/errata/RHSA-2010-0474.html
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html

References

• CVE Record
• NVD entry