Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-1173

high · 7.1

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

7.1
CVSS
21.2%
EPSS (exploit prob.)
97th
EPSS percentile
2010-05-07
Published

AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.33.3
linuxlinux_kernel2.6.0
linuxlinux_kernel2.6.1
linuxlinux_kernel2.6.2
linuxlinux_kernel2.6.3
linuxlinux_kernel2.6.4
linuxlinux_kernel2.6.5
linuxlinux_kernel2.6.6
linuxlinux_kernel2.6.7
linuxlinux_kernel2.6.8
linuxlinux_kernel2.6.8.1
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.10
linuxlinux_kernel2.6.11
linuxlinux_kernel2.6.11.1
linuxlinux_kernel2.6.11.2
linuxlinux_kernel2.6.11.3
linuxlinux_kernel2.6.11.4
linuxlinux_kernel2.6.11.5
linuxlinux_kernel2.6.11.6
linuxlinux_kernel2.6.11.7
linuxlinux_kernel2.6.11.8
linuxlinux_kernel2.6.11.9
linuxlinux_kernel2.6.11.10
linuxlinux_kernel2.6.11.11
linuxlinux_kernel2.6.11.12
linuxlinux_kernel2.6.12
linuxlinux_kernel2.6.12.1
linuxlinux_kernel2.6.12.2
linuxlinux_kernel2.6.12.3
linuxlinux_kernel2.6.12.4
linuxlinux_kernel2.6.12.5
linuxlinux_kernel2.6.12.6
linuxlinux_kernel2.6.13
linuxlinux_kernel2.6.13.1
linuxlinux_kernel2.6.13.2
linuxlinux_kernel2.6.13.3
linuxlinux_kernel2.6.13.4
linuxlinux_kernel2.6.13.5
linuxlinux_kernel2.6.14

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1173