The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools | Dec 1, 2016 | Nov 29, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 26, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 30, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Nov 29, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-374-ec2Upgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-virtualUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-2.6.32-70-ia64Upgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-2.6.32-70-386Upgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-2.6.32-70-serverUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-2.6.32-70-powerpc | Nov 8, 2024 | Nov 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub