Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 2.6.24 (including) | 2.6.24 (including) |
| Linux_kernel | Linux | 2.6.24-rc2 (including) | 2.6.24-rc2 (including) |
| Linux_kernel | Linux | 2.6.24-rc3 (including) | 2.6.24-rc3 (including) |
| Linux_kernel | Linux | 2.6.24.1 (including) | 2.6.24.1 (including) |
| Linux_kernel | Linux | 2.6.24.2 (including) | 2.6.24.2 (including) |
| Linux_kernel | Linux | 2.6.24.3 (including) | 2.6.24.3 (including) |
| Linux_kernel | Linux | 2.6.24.4 (including) | 2.6.24.4 (including) |
| Linux_kernel | Linux | 2.6.24.5 (including) | 2.6.24.5 (including) |
| Linux_kernel | Linux | 2.6.24.6 (including) | 2.6.24.6 (including) |
| Linux_kernel | Linux | 2.6.24.7 (including) | 2.6.24.7 (including) |
| Linux_kernel | Linux | 2.6.24_rc1 (including) | 2.6.24_rc1 (including) |
| Linux_kernel | Linux | 2.6.24_rc4 (including) | 2.6.24_rc4 (including) |
| Linux_kernel | Linux | 2.6.24_rc5 (including) | 2.6.24_rc5 (including) |
| Linux_kernel | Linux | 2.6.25 (including) | 2.6.25 (including) |
| Linux_kernel | Linux | 2.6.25.1 (including) | 2.6.25.1 (including) |
| Linux_kernel | Linux | 2.6.25.2 (including) | 2.6.25.2 (including) |
| Linux_kernel | Linux | 2.6.25.3 (including) | 2.6.25.3 (including) |
| Linux_kernel | Linux | 2.6.25.4 (including) | 2.6.25.4 (including) |
| Linux_kernel | Linux | 2.6.25.5 (including) | 2.6.25.5 (including) |
| Linux_kernel | Linux | 2.6.25.6 (including) | 2.6.25.6 (including) |
| Linux_kernel | Linux | 2.6.25.7 (including) | 2.6.25.7 (including) |
| Linux_kernel | Linux | 2.6.25.8 (including) | 2.6.25.8 (including) |
| Linux_kernel | Linux | 2.6.25.9 (including) | 2.6.25.9 (including) |
| Linux_kernel | Linux | 2.6.25.10 (including) | 2.6.25.10 (including) |
| Linux_kernel | Linux | 2.6.25.11 (including) | 2.6.25.11 (including) |
| Linux_kernel | Linux | 2.6.25.12 (including) | 2.6.25.12 (including) |
| Linux_kernel | Linux | 2.6.25.13 (including) | 2.6.25.13 (including) |
| Linux_kernel | Linux | 2.6.25.14 (including) | 2.6.25.14 (including) |
| Linux_kernel | Linux | 2.6.25.15 (including) | 2.6.25.15 (including) |
| Linux_kernel | Linux | 2.6.26 (including) | 2.6.26 (including) |
| Linux_kernel | Linux | 2.6.26.1 (including) | 2.6.26.1 (including) |
| Linux_kernel | Linux | 2.6.26.2 (including) | 2.6.26.2 (including) |
| Linux_kernel | Linux | 2.6.26.3 (including) | 2.6.26.3 (including) |
| MRG for RHEL-5 | RedHat | kernel-rt-0:2.6.24.7-81.el5rt | * |
| Linux | Ubuntu | hardy | * |
| Linux | Ubuntu | upstream | * |
| Linux-source-2.6.15 | Ubuntu | upstream | * |
| Linux-source-2.6.20 | Ubuntu | upstream | * |
| Linux-source-2.6.22 | Ubuntu | upstream | * |