CVE-2006-2271
lksctp lksctp: no CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days.
The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lksctp:lksctp
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html
- http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=35d63edb1c807bc5317e49592260e84637bc432e
- http://labs.musecurity.com/advisories/MU-200605-01.txt
- http://secunia.com/advisories/19990
- http://secunia.com/advisories/20157