CVE-2006-1858

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-22 · updated 2026-06-16
Weakness: CWE-20

Description

SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+129)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17
http://secunia.com/advisories/20185
http://secunia.com/advisories/20671
http://secunia.com/advisories/20716
http://secunia.com/advisories/20914
http://secunia.com/advisories/21045
http://secunia.com/advisories/21179
http://secunia.com/advisories/21476
http://secunia.com/advisories/21498
http://secunia.com/advisories/21605
http://secunia.com/advisories/22174
http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

Get alerted when CVE-2006-1858 or the next vulnerability affects your stack