The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-docUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade python-perfUpgrade kernel-devel | Dec 1, 2016 | Aug 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 1, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 1, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-build | Dec 18, 2015 | Aug 1, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.13.0-36-powerpc-e500Upgrade linux-image-3.13.0-36-generic-lpaeUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-36-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-3.13.0-36-powerpc64-embUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-3.13.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-36-genericUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.13.0-36-powerpc-smpUpgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-36-lowlatencyUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.2.0-68-omap | Nov 8, 2024 | Aug 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub