CVE catalog

CVE-2006-3745

kernel-source-2.4.27 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.44% · Oct 27, 2026

Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.273.12.4.27-10vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge1vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge2vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge3vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge4fixed
Debianfai-kernels3.11.9.1vulnerable
Debianfai-kernels3.11.9.1sarge1vulnerable
Debianfai-kernels3.11.9.1sarge2vulnerable
Debianfai-kernels3.11.9.1sarge3vulnerable
Debianfai-kernels3.11.9.1sarge4fixed
Debiansystemimager3.13.2.3-6vulnerable
Debiansystemimager3.13.2.3-6sarge1vulnerable
Debiansystemimager3.13.2.3-6sarge2vulnerable
Debiansystemimager3.13.2.3-6sarge3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.27deb3.12.4.27-10sarge4Not reportedDSA-1183-1Not reported
Debianfai-kernelsdeb3.11.9.1sarge4Not reportedDSA-1183-1Not reported
Debiansystemimagerdeb3.13.2.3-6sarge3Not reportedDSA-1183-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References