CVE-2006-2272

HIGH

7.8

CVSS Severity Score

EPSS Score0.0890%

EPSS Percentile38.68th

Published2006年5月9日

Last Modified2026年4月16日

Vulnerability Description

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.

Affected Platforms (CPE)

📦

Lksctp

Stream Control Transmission Protocol

<= 2.6.16

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html

🔗 http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=62b08083ec3dbfd7e533c8d230dd1d8191a6e813

🔗 http://labs.musecurity.com/advisories/MU-200605-01.txt

🔗 http://secunia.com/advisories/19990

🔗 http://secunia.com/advisories/20157

🔗 http://secunia.com/advisories/20237

🔗 http://secunia.com/advisories/20398

🔗 http://secunia.com/advisories/20671

Vulnerability Description

Affected Platforms (CPE)

Stream Control Transmission Protocol

References & Advisories

相关漏洞威胁