The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade python-perf | Dec 1, 2016 | Aug 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 1, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 1, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-build | Dec 18, 2015 | Aug 1, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-36-powerpc64-smpUpgrade linux-image-3.13.0-36-genericUpgrade linux-image-3.13.0-36-powerpc64-embUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.13.0-36-powerpc-e500Upgrade linux-image-3.13.0-36-generic-lpaeUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.13.0-36-powerpc-smpUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.13.0-36-lowlatency | Nov 8, 2024 | Aug 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub