NetSight
IP …
high7.1Public exploit code

CVE-2010-1173

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to caus…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.33.3
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4

Weakness classification

CWE-20

References