CVE-2010-1173

EXPLOITED

Linux Kernel < 2.6.33.3 - Denial of Service via SCTPChunkInit Packet with Invalid Parameters

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2010-1173 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Jon Oberheide.

AI-analyzed exploit summary This exploit triggers a denial-of-service (DoS) in Linux Kernel <= 2.6.33.3 by sending a malformed SCTP INIT packet with multiple invalid parameters, causing a kernel panic. It uses raw sockets and requires root privileges.

Description

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jon Oberheide · pythondoslinux
https://www.exploit-db.com/exploits/14594

This exploit triggers a denial-of-service (DoS) in Linux Kernel <= 2.6.33.3 by sending a malformed SCTP INIT packet with multiple invalid parameters, causing a kernel panic. It uses raw sockets and requires root privileges.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Linux Kernel <= 2.6.33.3 with SCTP enabled
No auth needed
Prerequisites: root privileges · dnet and dpkt libraries · SCTP enabled on target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (16)

Core 16
Core References
Exploit mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/29/1
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Exploit, Patch mailing-list x_refsource_mlist
http://article.gmane.org/gmane.linux.network/159531
Exploit mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/29/6
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0474.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43315
Various Sources x_refsource_confirm
http://kbase.redhat.com/faq/docs/DOC-31052
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=584645
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40218
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11416
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2053
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39830
Exploit mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127251068407878&w=2

Scores

EPSS 0.2131
EPSS Percentile 97.3%

Details

VulnCheck KEV 2026-02-09
CWE
CWE-20
Status published
Products (50)
linux/linux_kernel 2.6.0
linux/linux_kernel 2.6.1
linux/linux_kernel 2.6.2
linux/linux_kernel 2.6.3
linux/linux_kernel 2.6.4
linux/linux_kernel 2.6.5
linux/linux_kernel 2.6.6
linux/linux_kernel 2.6.7
linux/linux_kernel 2.6.8
linux/linux_kernel 2.6.8.1
... and 40 more
Published May 07, 2010
Tracked Since Feb 18, 2026