The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug | Dec 1, 2016 | Nov 10, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 10, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 10, 2014 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 18, 2015 | Nov 10, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-2.6.32-70-ia64Upgrade linux-image-2.6.32-70-virtualUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-2.6.32-70-versatileUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-2.6.32-70-serverUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-2.6.32-70-386Upgrade linux-image-2.6.32-374-ec2Upgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.2.0-72-generic-pae | Nov 8, 2024 | Nov 10, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub