SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2006-05-22 16:06
Updated : 2017-10-11 01:30
NVD link : CVE-2006-1858
Mitre link : CVE-2006-1858
CVE.ORG link : CVE-2006-1858
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-20
Improper Input Validation