CVE:CVE-2008-2826
CNNVD:CNNVD-200807-015
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux Kernel的net/sctp/socket.c文件中的sctp_getsockopt_local_addrs_old函数存在整数溢出漏洞。本地攻击者可以通过在sctp_getaddrs_old数据结构中设置超大的addr_num字段来触发这个溢出，导致消耗大量系统资源。
solution:Upgrade linux linux_kernel to a higher version than 2.6.25.9,and avoid the version (,2.6.25.9); Upgrade opensuse opensuse to a higher version than 10.3,11.0,and avoid the version 10.3,11.0; Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.04,7.10,8.04,and avoid the version 6.06,7.04,7.10,8.04