Linux SCTP 2.6.17
Approved changes feed: RSS · Atom
cpe:2.3:a:lksctp:stream_control_transmission_protocol:2.6.17:*:*:*:*:*:*:*
part: a version: 2.6.17 update: *
| Vendor | Lksctp (c5676b4d-3a48-50b3-a3bd-e9a1dd242b96) |
|---|---|
| Product | Stream Control Transmission Protocol (58ab0baf-9576-5739-a175-023ce80ba880) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632135 |
pkg:deb/ubuntu/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632137 |
pkg:github/sctp/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632138 |
pkg:rpm/centos/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632140 |
pkg:rpm/fedora/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632141 |
pkg:rpm/opensuse/lksctp-tools |
purl2cpe | 2026-06-01 10:11:11.632143 |
pkg:sourceforge/lksctp |
purl2cpe | 2026-06-01 10:11:11.632144 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2274 |
vulnerable | 2026-06-08 04:49:06.202435 |
Details available
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.
Published: 2006-05-09T20:00:00.000Z
Updated: 2024-08-07T17:43:28.813Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.