commit 52cbb7b78994ea3799f1bbb8c03bce1e2f72a271 Author: Chris Wright Date: Fri Jun 30 10:37:38 2006 -0700 Linux 2.6.17.3 commit 9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9 Author: Patrick McHardy Date: Fri Jun 30 05:33:12 2006 +0200 [PATCH] NETFILTER: SCTP conntrack: fix crash triggered by packet without chunks [CVE-2006-2934] When a packet without any chunks is received, the newconntrack variable in sctp_packet contains an out of bounds value that is used to look up an pointer from the array of timeouts, which is then dereferenced, resulting in a crash. Make sure at least a single chunk is present. Problem noticed by George A. Theall Signed-off-by: Patrick McHardy Signed-off-by: Chris Wright