CVE-2006-1857

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-22 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+129)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17
http://secunia.com/advisories/20185
http://secunia.com/advisories/20671
http://secunia.com/advisories/20716
http://secunia.com/advisories/20914
http://secunia.com/advisories/21045
http://secunia.com/advisories/21179
http://secunia.com/advisories/21465
http://secunia.com/advisories/21476
http://secunia.com/advisories/21498
http://secunia.com/advisories/22417
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Get alerted when CVE-2006-1857 or the next vulnerability affects your stack