Advisories:rPSA-2006-0110

From rPath Wiki

rPath Security Advisory 2006-0110-1

Published: 2006-06-23

Products

• rPath Linux 1

Rating

Severe

Exposure Level Classification

Remote Deterministic Denial of Service

Updated Versions

• kernel=conary.rpath.com@rpl:1/2.6.16.22-0.1-1

rPath Issue Tracking System

• RPL-457

References

• CVE-2006-2445
• CVE-2006-2448
• CVE-2006-3085

Description

In previous kernel versions, systems that use the SCTP protocol

are vulnerable to remote denial of service attacks including

remotely-triggered kernel crashes, and all systems are vulnerable

to local denial of service including locally-triggered kernel

hangs.

This update requires a reboot to implement the fixes.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html