SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-05-22 09:06
Updated : 2017-10-10 18:30
NVD link : CVE-2006-1858
Mitre link : CVE-2006-1858
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
linux
- linux_kernel