CVE-2006-1858

SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.

🔗 References (52)

• secalert@redhathttp://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17
• secalert@redhathttp://secunia.com/advisories/20185
• secalert@redhathttp://secunia.com/advisories/20671
• secalert@redhathttp://secunia.com/advisories/20716
• secalert@redhathttp://secunia.com/advisories/20914
• secalert@redhathttp://secunia.com/advisories/21045
• secalert@redhathttp://secunia.com/advisories/21179
• secalert@redhathttp://secunia.com/advisories/21476
• secalert@redhathttp://secunia.com/advisories/21498
• secalert@redhathttp://secunia.com/advisories/21605
• secalert@redhathttp://secunia.com/advisories/22174
• secalert@redhathttp://support.avaya.com/elmodocs2/security/ASA-2006-203.htm
• secalert@redhathttp://www.debian.org/security/2006/dsa-1097
• secalert@redhathttp://www.debian.org/security/2006/dsa-1103
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDKSA-2006:123