CVE-2011-1573

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.

• CWE-682

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde
• http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34Broken Link
• http://openwall.com/lists/oss-security/2011/04/11/12Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/04/11/4Mailing List, Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=695383Exploit, Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde
• http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34Broken Link
• http://openwall.com/lists/oss-security/2011/04/11/12Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/04/11/4Mailing List, Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2011-0927.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=695383Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Feb 2, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1567Multiple stack-based buffer overflows in IGSSdataServer.exe …
• CVE-2011-1568Format string vulnerability in the logText function in shmem…
• CVE-2011-1569download.aspx in Douran Portal 3.9.7.8 allows remote attacke…
• CVE-2011-1570Cross-site scripting (XSS) vulnerability in Liferay Portal C…
• CVE-2011-1571Unspecified vulnerability in the XSL Content portlet in Life…
• CVE-2011-1572Directory traversal vulnerability in the Admin Defined Comma…
• CVE-2011-1574Stack-based buffer overflow in the ReadS3M method in load_s3…
• CVE-2011-1575The STARTTLS implementation in ftp_parser.c in Pure-FTPd bef…
• CVE-2011-1576The Generic Receive Offload (GRO) implementation in the Linu…
• CVE-2011-1577Heap-based buffer overflow in the is_gpt_valid function in f…
• CVE-2011-1578Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2011-1579The checkCss function in includes/Sanitizer.php in the wikit…