Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux SCTP sctp_skb_pull函数 远程拒绝服务漏洞
Vulnerability Description
Linux SCTP (lksctp) 2.6.17之前版本可以使远程攻击者借助一个包含两个或更多DATA碎片的数据包,使skb指针在重组完整信息时指向自己,导致sctp_skb_pull函数中的无限递归,从而引起拒绝服务(无限递归和崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A