CVE-2011-1573

CVE-2011-1573 describes a denial-of-service vulnerability in the Linux kernel (before version 2.6.34) affecting the SCTP implementation. Specifically, when addip_enable and auth_enable are active, the kernel incorrectly calculates chunk lengths for INIT and INIT ACK packets due to insufficient zero-padding consideration. This flaw allows remote attackers to trigger an OOPS (kernel panic), resulting in a denial of service. The vulnerability has a CVSS score of 5.9 (MEDIUM) with a network attack vector and high impact on availability, but requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.