CVE-2008-4576
linux linux kernel: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days.
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
- http://permalink.gmane.org/gmane.comp.security.oss.general/1039