The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-abi-whitelists | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-386Upgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-lpia | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub