CVE 설명

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.

CVE 정보

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

EPSS First.org

언급된 제품

구성 0

Linux>>Linux_kernel >> Version 까지 (포함) 2.6.25.17

Linux>>Linux_kernel >> Version 2.2.27

Linux>>Linux_kernel >> Version 2.4.36

Linux>>Linux_kernel >> Version 2.4.36.1

Linux>>Linux_kernel >> Version 2.4.36.2

Linux>>Linux_kernel >> Version 2.4.36.3

Linux>>Linux_kernel >> Version 2.4.36.4

Linux>>Linux_kernel >> Version 2.4.36.5

Linux>>Linux_kernel >> Version 2.4.36.6

Linux>>Linux_kernel >> Version 2.6

Linux>>Linux_kernel >> Version 2.6.18

Linux>>Linux_kernel >> Version 2.6.19.4

Linux>>Linux_kernel >> Version 2.6.19.5

Linux>>Linux_kernel >> Version 2.6.19.6

Linux>>Linux_kernel >> Version 2.6.19.7

Linux>>Linux_kernel >> Version 2.6.20.16

Linux>>Linux_kernel >> Version 2.6.20.17

Linux>>Linux_kernel >> Version 2.6.20.18

Linux>>Linux_kernel >> Version 2.6.20.19

Linux>>Linux_kernel >> Version 2.6.20.20

Linux>>Linux_kernel >> Version 2.6.20.21

Linux>>Linux_kernel >> Version 2.6.21.5

Linux>>Linux_kernel >> Version 2.6.21.6

Linux>>Linux_kernel >> Version 2.6.21.7

Linux>>Linux_kernel >> Version 2.6.22

Linux>>Linux_kernel >> Version 2.6.22.1

Linux>>Linux_kernel >> Version 2.6.22.2

Linux>>Linux_kernel >> Version 2.6.22.8

Linux>>Linux_kernel >> Version 2.6.22.9

Linux>>Linux_kernel >> Version 2.6.22.10

Linux>>Linux_kernel >> Version 2.6.22.11

Linux>>Linux_kernel >> Version 2.6.22.12

Linux>>Linux_kernel >> Version 2.6.22.13

Linux>>Linux_kernel >> Version 2.6.22.14

Linux>>Linux_kernel >> Version 2.6.22.15

Linux>>Linux_kernel >> Version 2.6.22.17

Linux>>Linux_kernel >> Version 2.6.22.18

Linux>>Linux_kernel >> Version 2.6.22.19

Linux>>Linux_kernel >> Version 2.6.22.20

Linux>>Linux_kernel >> Version 2.6.22.21

Linux>>Linux_kernel >> Version 2.6.22.22

Linux>>Linux_kernel >> Version 2.6.22_rc1

Linux>>Linux_kernel >> Version 2.6.22_rc7

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23.8

Linux>>Linux_kernel >> Version 2.6.23.9

Linux>>Linux_kernel >> Version 2.6.23.10

Linux>>Linux_kernel >> Version 2.6.23.11

Linux>>Linux_kernel >> Version 2.6.23.12

Linux>>Linux_kernel >> Version 2.6.23.13

Linux>>Linux_kernel >> Version 2.6.23.15

Linux>>Linux_kernel >> Version 2.6.23.16

Linux>>Linux_kernel >> Version 2.6.23.17

Linux>>Linux_kernel >> Version 2.6.23_rc1

Linux>>Linux_kernel >> Version 2.6.24

Linux>>Linux_kernel >> Version 2.6.24.1

Linux>>Linux_kernel >> Version 2.6.24.2

Linux>>Linux_kernel >> Version 2.6.24.3

Linux>>Linux_kernel >> Version 2.6.24.4

Linux>>Linux_kernel >> Version 2.6.24.5

Linux>>Linux_kernel >> Version 2.6.24.6

Linux>>Linux_kernel >> Version 2.6.24.7

Linux>>Linux_kernel >> Version 2.6.24_rc1

Linux>>Linux_kernel >> Version 2.6.24_rc4

Linux>>Linux_kernel >> Version 2.6.24_rc5

Linux>>Linux_kernel >> Version 2.6.25

Linux>>Linux_kernel >> Version 2.6.25.1

Linux>>Linux_kernel >> Version 2.6.25.2

Linux>>Linux_kernel >> Version 2.6.25.3

Linux>>Linux_kernel >> Version 2.6.25.4

Linux>>Linux_kernel >> Version 2.6.25.5

Linux>>Linux_kernel >> Version 2.6.25.6

Linux>>Linux_kernel >> Version 2.6.25.7

Linux>>Linux_kernel >> Version 2.6.25.8

Linux>>Linux_kernel >> Version 2.6.25.9

Linux>>Linux_kernel >> Version 2.6.25.10

Linux>>Linux_kernel >> Version 2.6.25.11

Linux>>Linux_kernel >> Version 2.6.25.12

Linux>>Linux_kernel >> Version 2.6.25.13

Linux>>Linux_kernel >> Version 2.6.25.14

Linux>>Linux_kernel >> Version 2.6.25.15

Linux>>Linux_kernel >> Version 2.6.25.16

참고 자료

http://secunia.com/advisories/32998
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
Tags : vendor-advisory, x_refsource_SUSE

http://permalink.gmane.org/gmane.comp.security.oss.general/1039
Tags : mailing-list, x_refsource_MLIST

http://www.redhat.com/support/errata/RHSA-2009-0009.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html
Tags : vendor-advisory, x_refsource_SUSE

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.securityfocus.com/bid/31634
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/33586
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2008/dsa-1687
Tags : vendor-advisory, x_refsource_DEBIAN

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9822
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/32918
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-679-1
Tags : vendor-advisory, x_refsource_UBUNTU

https://exchange.xforce.ibmcloud.com/vulnerabilities/45773
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/32759
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/33180
Tags : third-party-advisory, x_refsource_SECUNIA

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18
Tags : x_refsource_CONFIRM

http://www.gossamer-threads.com/lists/linux/kernel/981012?page=last
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/32370
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-1017.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.27-rc6-git6.log
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/32386
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html
Tags : vendor-advisory, x_refsource_FEDORA

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.debian.org/security/2008/dsa-1681
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/33182
Tags : third-party-advisory, x_refsource_SECUNIA

CWE-ID	약점 이름	출처
CWE-287	Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE Other	정보 없음.

날짜	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.36%	–	–
2022-04-03	–	–	4.36%	–	–
2022-09-25	–	–	4.36%	–	–
2023-03-12	–	–	–	11.28%	–
2023-07-09	–	–	–	8.3%	–
2023-08-13	–	–	–	8.3%	–
2024-02-18	–	–	–	8.89%	–
2024-06-02	–	–	–	8.89%	–
2024-10-27	–	–	–	9.54%	–
2024-12-22	–	–	–	10.8%	–
2025-01-19	–	–	–	10.8%	–
2025-03-18	–	–	–	–	3%
2025-03-30	–	–	–	–	3.61%
2025-04-30	–	–	–	–	4.82%
2025-11-18	–	–	–	–	4.82%
2025-11-21	–	–	–	–	4.82%
2026-04-12	–	–	–	–	4.82%
2026-06-07	–	–	–	–	5.88%

날짜	백분위수
2022-02-06	71%
2022-04-03	87%
2022-09-25	88%
2023-03-12	94%
2023-07-09	93%
2023-08-13	94%
2024-02-18	94%
2024-06-02	95%
2024-10-27	95%
2024-12-22	95%
2025-01-19	95%
2025-03-18	86%
2025-03-30	87%
2025-04-30	89%
2025-11-18	88%
2025-11-21	89%
2026-04-12	9%
2026-06-07	91%

CVE-2008-4576

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

언급된 제품

구성 0

참고 자료

CVE-2008-4576 : 상세 정보

CVE-2008-4576

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

언급된 제품

구성 0

참고 자료