CVE-2014-3688

 

Published at: - 30-11-2014 02:59

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• [oss-security] 20141113 Linux kernel: SCTP issues-
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4
• https://bugzilla.redhat.com/show_bug.cgi?id=1155745
• https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26b87c7881006311828bb0ab271a551a62dcceb4
• USN-2418-1-
• USN-2417-1-
• DSA-3060-
• RHSA-2015:0062-
• RHSA-2015:0115-
• SUSE-SU-2015:0481-
• openSUSE-SU-2015:0566-
• SUSE-SU-2015:0652-
• SUSE-SU-2015:0736-
• HPSBGN03285-
• HPSBGN03282-

 

Keywords

NVD

 

CVE-2014-3688

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures