Upstream information
Description
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)
Novell/SUSE information
Novell Bugzilla entry: 600375 SUSE Security Advisories:- SUSE-SA:2010:027, published Fri, 02 Jul 2010 08:00:00 +0000
- SUSE-SA:2011:015, published Thu, 24 Mar 2011 16:00:00 +0000
- SUSE-SA:2011:017, published Mon, 18 Apr 2011 11:00:00 +0000
- openSUSE-SU-2011:0346-1, published Fri, 15 Apr 2011 22:02:25 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 2557 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 2568 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 2568 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 2568 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7384 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7384 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7384 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7384 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.x86 sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 2569 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.x86 sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 2569 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sle11-sp1-hae.x86 sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 2569 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sle11-sp1-hae.x86 sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 2569 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.x86 sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 2569 |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 2567 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 2567 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 2567 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sle10-sp3-sdk.x86 sled10-sp3.x86 sles10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7381 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.x86 sled10-sp3.x86 sles10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7381 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.x86 sled10-sp3.x86 sles10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7381 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.x86 sled10-sp3.x86 sles10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7381 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 2558 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7383 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7383 |
| SLE 11 SP1 DEBUGINFO |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 SAT Patch Nr: 2570 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 SAT Patch Nr: 2570 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 SAT Patch Nr: 2570 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 SAT Patch Nr: 2570 |
| SUSE Linux Enterprise Server 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 SAT Patch Nr: 2570 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 2555 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12814 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 2561 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.ia64 ZYPP Patch Nr: 7382 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.ia64 ZYPP Patch Nr: 7382 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.ia64 ZYPP Patch Nr: 7382 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7385 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7385 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7385 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 2556 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 2566 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 2566 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 2566 |
