The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade python-perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 3, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.2.0-68-omapUpgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-preemptUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-serverUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-ia64Upgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.13.0-35-powerpc-smp | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub