CVE-2010-3432: Input Validation
Description of problem: sctppacketconfig() is called when getting the packet ready for appending of chunks. The function should not touch the current state, since it's possible to ping-pong between two transports when sending, and that can result packet corruption followed by skb overlfow crash.
Upstream commit: http://git.kernel.org/linus/4bdab43323b459900578b200a4b8cf9713ac8fab
Reference: http://marc.info/?l=linux-netdev&m=128453869227715&w=3 http://www.spinics.net/lists/linux-sctp/msg01051.html
Essentially, we are resetting the contents of the packet when it's not empty.
Other sources
The sctppacketconfig function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3432?
CVE-2010-3432 has been classified with a medium severity level due to its potential impact on system stability.
How do I fix CVE-2010-3432?
To fix CVE-2010-3432, you should upgrade the Linux kernel to a version that has addressed this vulnerability.
What systems are affected by CVE-2010-3432?
CVE-2010-3432 affects various distributions of the Linux kernel, including specific versions of Debian, Ubuntu, and openSUSE.
What type of vulnerability is CVE-2010-3432?
CVE-2010-3432 is a vulnerability related to packet corruption that can lead to system crashes under certain conditions.
Is CVE-2010-3432 a remote code execution vulnerability?
No, CVE-2010-3432 does not facilitate remote code execution but can lead to a denial of service due to packet corruption.