CVE-2006-2275

Published: May 9, 2006Modified: Apr 16, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."

Affected (4)

Products: Lksctp: Stream Control Transmission Protocol · Canonical: Ubuntu Linux

1 product

Stream Control Transmission Protocol

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lksctp Stream Control Transmission Protocol	Before 2.6.17

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.04
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06

Related CWEs

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (22)

http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20716

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/21465

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/22417

Source: cve@mitre.org

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0575.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/17955

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.trustix.org/errata/2006/0026

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/usn-302-1

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26433

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11295

Source: cve@mitre.org

Broken Link

http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/20716

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/21465

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/22417

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2006-0575.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/17955

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.trustix.org/errata/2006/0026

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.ubuntu.com/usn/usn-302-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26433

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11295

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.