The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade kernel-doc | Dec 1, 2016 | Nov 29, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-devel | Apr 30, 2021 | Nov 30, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 30, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-devel | Dec 18, 2015 | Nov 29, 2014 |
| Ubuntu | — | Upgrade linux-image-3.16.0-29-genericUpgrade linux-image-3.16.0-29-powerpc64-smpUpgrade linux-image-3.13.0-44-genericUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-2.6.32-70-ia64Upgrade linux-image-3.2.0-74-highbankUpgrade linux-image-3.2.0-74-powerpc-smpUpgrade linux-image-3.16.0-29-powerpc-smpUpgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-3.13.0-44-lowlatencyUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-3.16.0-29-powerpc-e500mcUpgrade linux-image-3.2.0-74-generic-paeUpgrade linux-image-3.13.0-44-powerpc64-smpUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-3.16.0-29-generic-lpaeUpgrade linux-image-3.13.0-44-powerpc-e500mcUpgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-3.16.0-29-powerpc64-embUpgrade linux-image-2.6.32-70-serverUpgrade linux-image-3.13.0-44-generic-lpaeUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-2.6.32-374-ec2Upgrade linux-image-3.13.0-44-powerpc-e500Upgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-2.6.32-70-386Upgrade linux-image-3.2.0-74-omapUpgrade linux-image-3.2.0-1457-omap4Upgrade linux-image-3.13.0-44-powerpc64-embUpgrade linux-image-3.16.0-29-lowlatencyUpgrade linux-image-3.2.0-74-genericUpgrade linux-image-3.13.0-44-powerpc-smpUpgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-3.2.0-74-powerpc64-smpUpgrade linux-image-3.2.0-74-virtualUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-2.6.32-70-virtual | Nov 8, 2024 | Nov 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub