CVE-2011-1573

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during…

published February 2, 2012

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02668 · 85.5th percentile
Published
2012-02-02T02:00Z
EPSS history
Timeline
  • 02 FEB 02:00Z
    net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during…
    cvelistv5