[kernel] r6605 - patch-tracking
Dann Frazier
dannf at costa.debian.org
Thu May 18 23:24:39 UTC 2006
Author: dannf
Date: Thu May 18 23:24:39 2006
New Revision: 6605
Modified:
patch-tracking/CVE-2006-2271
Log:
pending fix in sarge3; updated metadata
Modified: patch-tracking/CVE-2006-2271
==============================================================================
--- patch-tracking/CVE-2006-2271 (original)
+++ patch-tracking/CVE-2006-2271 Thu May 18 23:24:39 2006
@@ -1,12 +1,23 @@
Candidate: CVE-2006-2271
References:
-Description: SCTP DoS
+ FULLDISC:20060508 [MU-200605-01] Multiple vulnerabilities in Linux SCTP 2.6.16
+ URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html
+ MISC:http://labs.musecurity.com/advisories/MU-200605-01.txt
+ CONFIRM:http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=35d63edb1c807bc5317e49592260e84637bc432e
+ FRSIRT:ADV-2006-1734
+ URL:http://www.frsirt.com/english/advisories/2006/1734
+ SECUNIA:19990
+ URL:http://secunia.com/advisories/19990
+Description:
+ The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote
+ attackers to cause a denial of service (kernel panic) via an unexpected chunk
+ when the session is in CLOSED state.
Notes:
Bugs:
upstream: released (2.6.16.15)
linux-2.6:
-2.6.8-sarge-security:
-2.4.27-sarge-security:
+2.6.8-sarge-security: pending (2.6.8-16sarge3)
+2.4.27-sarge-security: pending (2.4.27-10sarge3)
2.4.27:
2.4.19-woody-security:
2.4.18-woody-security:
More information about the Kernel-svn-changes
mailing list