CVE-2008-4576

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH…

published October 15, 2008

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03680 · 89.6th percentile
Published
2008-10-15T19:00Z
EPSS history
Timeline
  • 15 OCT 19:00Z
    sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH…
    cvelistv5