NetSight
IP …
high7.5

CVE-2017-2634

It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() fu…

Impact

It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.22.17
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Server
Version 5.0
RedhatEnterprise Linux Server Aus
Versions 5.6, 5.9
RedhatEnterprise Linux Workstation
Version 5.0

Weakness classification

CWE-476CWE-119

References