SCTP vulnerability could exhaust system resources
vnunet.com, 04 May 2006
A flaw in the Linux kernel could be exploited by malicious users to cause a denial of service attack.
The vulnerability is caused by missing checks on the SCTP chunk sizes in the SCTP-netfilter code that could be used to create an infinite loop that exhausts system resources.
The problem can be solved by updating to version 2.6.16.13 or later on the Linux kernel website.
Security firm Secunia lists the remote attack as 'moderately critical'.
The problem was fixed by Greg Kroah-Hartman and Patrick McHardy, based on a patch by Ingo Molnar.
12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...
Web application tool revamp promised later today More...
Events such as Microsoft's Patch Tuesday could be used for... More...
MoD admits to losing a hard drive containing up to... More...
Do you agree?
Have your say on this article