The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-docUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-firmware | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 10, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-ec2 | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-2.6.32-70-ia64Upgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-2.6.32-70-virtualUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-2.6.32-70-serverUpgrade linux-image-2.6.32-70-386Upgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-2.6.32-374-ec2 | Nov 8, 2024 | Nov 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub