The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade perfUpgrade kernel-docUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-headers | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 10, 2014 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-70-preemptUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-2.6.32-70-386Upgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-2.6.32-374-ec2Upgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-2.6.32-70-ia64Upgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-2.6.32-70-virtualUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-2.6.32-70-server | Nov 8, 2024 | Nov 10, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub