CVE Vulnerabilities

CVE-2008-3526

Published: Aug 27, 2008 | Modified: Feb 13, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 2.6.24 (including) 2.6.24 (including)
Linux_kernel Linux 2.6.24-rc2 (including) 2.6.24-rc2 (including)
Linux_kernel Linux 2.6.24-rc3 (including) 2.6.24-rc3 (including)
Linux_kernel Linux 2.6.24.1 (including) 2.6.24.1 (including)
Linux_kernel Linux 2.6.24.2 (including) 2.6.24.2 (including)
Linux_kernel Linux 2.6.24.3 (including) 2.6.24.3 (including)
Linux_kernel Linux 2.6.24.4 (including) 2.6.24.4 (including)
Linux_kernel Linux 2.6.24.5 (including) 2.6.24.5 (including)
Linux_kernel Linux 2.6.24.6 (including) 2.6.24.6 (including)
Linux_kernel Linux 2.6.24.7 (including) 2.6.24.7 (including)
Linux_kernel Linux 2.6.24_rc1 (including) 2.6.24_rc1 (including)
Linux_kernel Linux 2.6.24_rc4 (including) 2.6.24_rc4 (including)
Linux_kernel Linux 2.6.24_rc5 (including) 2.6.24_rc5 (including)
Linux_kernel Linux 2.6.25 (including) 2.6.25 (including)
Linux_kernel Linux 2.6.25.1 (including) 2.6.25.1 (including)
Linux_kernel Linux 2.6.25.2 (including) 2.6.25.2 (including)
Linux_kernel Linux 2.6.25.3 (including) 2.6.25.3 (including)
Linux_kernel Linux 2.6.25.4 (including) 2.6.25.4 (including)
Linux_kernel Linux 2.6.25.5 (including) 2.6.25.5 (including)
Linux_kernel Linux 2.6.25.6 (including) 2.6.25.6 (including)
Linux_kernel Linux 2.6.25.7 (including) 2.6.25.7 (including)
Linux_kernel Linux 2.6.25.8 (including) 2.6.25.8 (including)
Linux_kernel Linux 2.6.25.9 (including) 2.6.25.9 (including)
Linux_kernel Linux 2.6.25.10 (including) 2.6.25.10 (including)
Linux_kernel Linux 2.6.25.11 (including) 2.6.25.11 (including)
Linux_kernel Linux 2.6.25.12 (including) 2.6.25.12 (including)
Linux_kernel Linux 2.6.25.13 (including) 2.6.25.13 (including)
Linux_kernel Linux 2.6.25.14 (including) 2.6.25.14 (including)
Linux_kernel Linux 2.6.25.15 (including) 2.6.25.15 (including)
Linux_kernel Linux 2.6.26 (including) 2.6.26 (including)
Linux_kernel Linux 2.6.26.1 (including) 2.6.26.1 (including)
Linux_kernel Linux 2.6.26.2 (including) 2.6.26.2 (including)
Linux_kernel Linux 2.6.26.3 (including) 2.6.26.3 (including)

References