kernel: multiple vulnerabilities [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2008-4113 CVE-2008-4445

Created:

October 8, 2008

Updated:

November 3, 2008

Description:

From the Red Hat advisory:

Missing boundary checks were reported in the Linux kernel SCTP implementation. This could, potentially, cause information disclosure via a specially crafted SCTP_HMAC_IDENT IOCTL request. (CVE-2008-4113, CVE-2008-4445)

Alerts:

Mandriva	MDVSA-2008:223	2008-10-31
Ubuntu	USN-659-1	2008-10-27
SuSE	SUSE-SA:2008:053	2008-10-27
Debian	DSA-1655-1	2008-10-16
Red Hat	RHSA-2008:0857-02	2008-10-07

(Log in to post comments)