V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
CVE-2008-3792
DEB
HighConfirmedExploit available

net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify tha…

CVSS
7.1
High
EPSS
0.04
p88
Published
2008-01-01
Updated
2008-01-01
Description

net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.

Affected products
Linux_kernel
CVSS vector
AV:N/AC:M/Au:N/C:N/I:N/A:C
Timeline
2008-01-01
Published
2008-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: M
Medium
Authentication
Au: N
None (N)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: C
Complete
Exploit indicators
EPSS
0.039 · p88
Known exploited (KEV)
No
Known exploits — Сканер-ВС
30080
exploitdb · https://www.exploit-db.com/exploits/30080
Enterprise
30604
exploitdb · https://www.exploit-db.com/exploits/30604
Enterprise
30605
exploitdb · https://www.exploit-db.com/exploits/30605
Enterprise
4460
exploitdb · https://www.exploit-db.com/exploits/4460
Enterprise
6851
exploitdb · https://www.exploit-db.com/exploits/6851
Enterprise
7618
exploitdb · https://www.exploit-db.com/exploits/7618
Enterprise
CVE-2006-4814
github-poc · https://github.com/tagatac/linux-CVE-2006-4814
Enterprise
Affected software
ProductVendorStatus
kernel-rtTracked
linuxTracked
linux-2.6Tracked
linux-2.6Tracked
linux-2.6.24Tracked
linux_kernel*Tracked