CVEvulnerability

CVE-2006-2271

7.8 HIGH Published 2006-05-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.

Affected configurations

• lksctp lksctp 2.6.0 test1 0.7.2 • lksctp lksctp 2.6.0 test4 0.7.3 • lksctp lksctp 2.6.2 0.9.0 • lksctp lksctp 2.6.3 1.0.0 • lksctp lksctp 2.6.6 1.0.1 • lksctp lksctp 2.6.10 1.0.2 • lksctp lksctp 2.6.13 1.0.3 • lksctp lksctp 2.6.14 1.0.4 • lksctp lksctp 2.6.15 1.0.5 • lksctp lksctp 2.6.16 1.0.6

References