CVE-2006-2272
lksctp stream control transmission protocol: no CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days.
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lksctp:stream_control_transmission_protocol
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html
- http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=62b08083ec3dbfd7e533c8d230dd1d8191a6e813
- http://labs.musecurity.com/advisories/MU-200605-01.txt
- http://secunia.com/advisories/19990
- http://secunia.com/advisories/20157