In the Linux kernel, the following vulnerability has been resolved:
dccp: Fix out of bounds access in DCCP error handler
There was a previous attempt to fix an out-of-bounds access in the DCCP
error handlers, but that fix assumed that the error handlers only want
to access the first 8 bytes of the DCCP header. Actually, they also look
at the DCCP sequence number, which is stored beyond 8 bytes, so an
explicit pskb_may_pull() is required.
6706a97fec963d6cb3f7fc2978ec1427b4651214 builds before 3533e10272555c422a7d51ebc0ce8c483429f7f2; from 6706a97fec963d6cb3f7fc2978ec1427b4651214 before 177212bf6dc1ff2d13d0409cddc5c9e81feec63d; 6706a97fec963d6cb3f7fc2978ec1427b4651214 builds before 7a7dd70cb954d3efa706a429687ded88c02496fa; 6706a97fec963d6cb3f7fc2978ec1427b4651214 builds before 4b8a938e329ae4eb54b73b0c87b5170607b038a8; 6706a97fec963d6cb3f7fc2978ec1427b4651214 builds before 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9; from 6706a97fec963d6cb3f7fc2978ec1427b4651214 before f8a7f10a1dccf9868ff09342a73dce27501b86df; from 6706a97fec963d6cb3f7fc2978ec1427b4651214 before d8171411a661253e6271fa10b65b46daf1b6471c; from 6706a97fec963d6cb3f7fc2978ec1427b4651214 before ec620c34f5fa5d055f9f6136a387755db6157712; and 19 more ranges
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
