CVE-2008-2136

Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 16 May 2008, 06:54
Last modified:07 Aug 2024, 08:49

Vulnerability Summary

Overall Risk (default)
medium
36/100
CVSS Score
7.8 HIGH
v2.0 (nvd)
EPSS Score
23.49% HIGH
23% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 May 2008, 06:54
Published
Vulnerability first disclosed
07 Aug 2024, 08:49
Last Modified
Vulnerability information updated

Description

Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.

CVSS Metrics

  • v2.0•HIGH•Score: 7.8AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 23.49%• Percentile: 96%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • canonical•ubuntu_linux

    6.06 | 7.04 | 7.10 | 8.04

  • debian•debian_linux

    4.0

  • linux•linux_kernel

    ≥ 2.4.0, < 2.4.36.5 | ≥ 2.6.0, < 2.6.25.3

References (39)