NetSight
IP …
high7.8

CVE-2010-3432

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which a…

Impact

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.35.6
OpensuseOpensuse
Version 11.3
SuseLinux Enterprise Real Time Extension
Version 11
DebianDebian Linux
Version 5.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04, 10.10

Weakness classification

CWE-20

References