Improper input validation in Linux Kernel

CVE-2006-1858

SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.062 (92.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References