CVE-2006-1858
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash...
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
Exploit likelihood
What each source reports
NVD Score used
7.8
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
- Record
CVE-2006-1858- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
- Record
CVE-2006-1858- Updated
- 2026-11-02
EUVDEUVD-2006-1858 No score
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
- Record
EUVD-2006-1858- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8765-hghf-r7cc No score
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash...
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
- Record
GHSA-8765-hghf-r7cc- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.27Debian:3.1 From an advisory covering 16 CVEs |
before 2.4.27-10sarge3, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge2 |
2.4.27-10sarge3 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 24 CVEs |
before 2.6.8-16sarge3, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge2 |
2.6.8-16sarge3 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1858 is a high vulnerability (CVSS 7.8) in Linux Kernel, published May 22, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.28%, the 93rd percentile. No source names a fixed version.
References
novell.com/linux/security/advisories/2006_42_kernel.html
vupen.com/english/advisories/2006/2554
redhat.com/support/errata/RHSA-2006-0617.html
secunia.com/advisories/20716
vupen.com/english/advisories/2006/1893
secunia.com/advisories/21605
Show 70 moreShow less
secunia.com/advisories/21476
novell.com/linux/security/advisories/2006_47_kernel.html
securityfocus.com/bid/18085
mandriva.com/security/advisories?name=MDKSA-2006:150
ubuntu.com/usn/usn-302-1
mandriva.com/security/advisories?name=MDKSA-2006:123
exchange.xforce.ibmcloud.com/vulnerabilities/26585
debian.org/security/2006/dsa-1097
secunia.com/advisories/20185
secunia.com/advisories/22174
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9510
debian.org/security/2006/dsa-1103
secunia.com/advisories/21498
support.avaya.com/elmodocs2/security/ASA-2006-203.htm
secunia.com/advisories/21045
osvdb.org/25696
secunia.com/advisories/20671
secunia.com/advisories/21179
secunia.com/advisories/20914
nvd.nist.gov/vuln/detail/CVE-2006-1858
github.com/advisories/GHSA-8765-hghf-r7cc
access.redhat.com/errata/RHSA-2006:0617
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=191736
bugzilla.redhat.com/show_bug.cgi?id=192632
bugzilla.redhat.com/show_bug.cgi?id=192636
bugzilla.redhat.com/show_bug.cgi?id=196280
bugzilla.redhat.com/show_bug.cgi?id=197610
bugzilla.redhat.com/show_bug.cgi?id=197670
bugzilla.redhat.com/show_bug.cgi?id=198973
bugzilla.redhat.com/show_bug.cgi?id=199172
bugzilla.redhat.com/show_bug.cgi?id=200111
bugzilla.redhat.com/show_bug.cgi?id=202122
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0617.json
access.redhat.com/security/cve/CVE-2004-2660
bugzilla.redhat.com/show_bug.cgi?id=1617428
cve.org/CVERecord?id=CVE-2004-2660
nvd.nist.gov/vuln/detail/CVE-2004-2660
access.redhat.com/security/cve/CVE-2006-1858
bugzilla.redhat.com/show_bug.cgi?id=1618068
cve.org/CVERecord?id=CVE-2006-1858
access.redhat.com/security/cve/CVE-2006-2444
bugzilla.redhat.com/show_bug.cgi?id=1618103
cve.org/CVERecord?id=CVE-2006-2444
nvd.nist.gov/vuln/detail/CVE-2006-2444
access.redhat.com/security/cve/CVE-2006-2932
bugzilla.redhat.com/show_bug.cgi?id=1618124
cve.org/CVERecord?id=CVE-2006-2932
nvd.nist.gov/vuln/detail/CVE-2006-2932
access.redhat.com/security/cve/CVE-2006-2935
bugzilla.redhat.com/show_bug.cgi?id=1618127
cve.org/CVERecord?id=CVE-2006-2935
nvd.nist.gov/vuln/detail/CVE-2006-2935
access.redhat.com/security/cve/CVE-2006-2936
bugzilla.redhat.com/show_bug.cgi?id=1618128
cve.org/CVERecord?id=CVE-2006-2936
nvd.nist.gov/vuln/detail/CVE-2006-2936
access.redhat.com/security/cve/CVE-2006-3468
bugzilla.redhat.com/show_bug.cgi?id=1618142
cve.org/CVERecord?id=CVE-2006-3468
nvd.nist.gov/vuln/detail/CVE-2006-3468
access.redhat.com/security/cve/CVE-2006-3626
bugzilla.redhat.com/show_bug.cgi?id=1618145
cve.org/CVERecord?id=CVE-2006-3626
nvd.nist.gov/vuln/detail/CVE-2006-3626
access.redhat.com/security/cve/CVE-2006-3745
bugzilla.redhat.com/show_bug.cgi?id=1618160
cve.org/CVERecord?id=CVE-2006-3745
nvd.nist.gov/vuln/detail/CVE-2006-3745