Vulnetix
Try Vulnetix Request Demo
CVE-2008-4618 PUBLISHED CVSS 7.800000190734863 HIGH

The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.

EPSS 1.01% · 77.0th percentile

Risk Scores

CVSS v2.0
7.800000190734863
EPSS Score
1.01%
77.0th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.26.4, 0, 2.2.27
n/an/an/a

Timeline

References

Open in Interactive Console →