CVE-2008-2136

Linux Kernel 2.4.0-2.4.36.4 and 2.6.0-2.6.25.2 - Denial of Service via SIT Tunnel Memory Leak

Title source: llm
STIX 2.1

Description

Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.

References (39)

Core 39
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42451
Third Party Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020118
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30276
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30962
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31198
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30368
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31341
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1716/references
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0607.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30499
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30198
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1588
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33280
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31689
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29235
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0585.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://marc.info/?l=linux-netdev&m=121031533024912&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30241
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:174
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31107
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0973.html
Third Party Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0612.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31628
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-625-1
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0787.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1543/references
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30818
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33201
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

Scores

EPSS 0.0493
EPSS Percentile 91.2%

Details

CWE
CWE-399
Status published
Products (6)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 7.04
canonical/ubuntu_linux 7.10
canonical/ubuntu_linux 8.04
debian/debian_linux 4.0
linux/linux_kernel 2.4.0 - 2.4.36.5
Published May 16, 2008
Tracked Since Feb 18, 2026