CVE-2008-3526

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/08/26/9
http://www.securityfocus.com/bid/30847
http://secunia.com/advisories/31881
http://www.debian.org/security/2008/dsa-1636
http://secunia.com/advisories/32190
http://www.redhat.com/support/errata/RHSA-2008-0857.html
http://www.ubuntu.com/usn/usn-659-1
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
http://secunia.com/advisories/32393
http://www.mandriva.com/security/advisories?name=MDVSA-2008:223
https://exchange.xforce.ibmcloud.com/vulnerabilities/44723
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=30c2235cbc477d4629983d440cdc4f496fec9246

Configuration 1

cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*

---

Published : 2008-08-27 08:41

Updated : 2023-02-13 02:19

---

NVD link : CVE-2008-3526

Mitre link : CVE-2008-3526

No products.

CWE-189