CVE-2006-2271

ALTO 7.8CVE-2006-2271 · Published 09/05/2006 · updated 16/06/2026

En resumen

CVE-2006-2271 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a lksctp (lksctp).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.4%, mayor que el 91.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
lksctp lksctp	`= 2.6.0_test1_0.7.2= 2.6.0_test4_0.7.3= 2.6.10_1.0.2= 2.6.13_1.0.3= 2.6.14_1.0.4= 2.6.15_1.0.5= 2.6.16_1.0.6= 2.6.2_0.9.0= 2.6.3_1.0.0= 2.6.6_1.0.1`	No fix yet

Description

The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.

References

archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html · Patch
git.kernel.org/git
labs.musecurity.com/advisories/MU-200605-01.txt · Patch
secunia.com/advisories/19990 · Patch
secunia.com/advisories/20157
secunia.com/advisories/20237
secunia.com/advisories/20398
secunia.com/advisories/20671
secunia.com/advisories/20716
secunia.com/advisories/20914
secunia.com/advisories/21476
secunia.com/advisories/21745
support.avaya.com/elmodocs2/security/ASA-2006-161.htm
debian.org/security/2006/dsa-1097
debian.org/security/2006/dsa-1103
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006-05-31.html
osvdb.org/25632
redhat.com/support/errata/RHSA-2006-0493.html
securityfocus.com/bid/17910
trustix.org/errata/2006/0026
ubuntu.com/usn/usn-302-1
vupen.com/english/advisories/2006/1734
vupen.com/english/advisories/2006/2554
exchange.xforce.ibmcloud.com/vulnerabilities/26430
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10934

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free