Vulnerability CVE-2006-2272: Information

Description

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.

Severity: HIGH (7.8)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:lksctp:stream_control_transmission_protocol:*:*:*:*:*:*:*:*

      End including

      2.6.16

      ---