Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2011-1573: Linux kernel SCTP can crash from crafted packets

CVE-2011-1573 · published 14 years ago

Summary

The Linux kernel (versions before 2.6.34) mishandles certain SCTP network messages when specific features are turned on, ignoring extra padding bytes. This mistake can cause the system to stop responding or crash if an attacker sends specially crafted data. Update the kernel to a version newer than 2.6.34 or apply the available patch to prevent the crash.

What to do

Update linux linux_kernel to version 2.6.34 or later.

Affected software

Vendor	Product	Affected versions
linux	linux_kernel	< 2.6.34 `cpe:2.3:o:linux:linux_kernel::::::::`

Original advisory text

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=...
http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34 Broken Link
http://openwall.com/lists/oss-security/2011/04/11/12 Mailing List Patch Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/11/4 Mailing List Patch Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0927.html Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=695383 Exploit Issue Tracking Patch Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.9 Medium

Exploitation

3% chance of attack within 30 days

Type

CWE-682Incorrect Calculation

Timeline

Published2 Feb 2012

Updated30 Oct 2026

First seen29 Sep 2026

Sources

CVE-2011-1573 · NVD

Track software like this

Free during beta