Published: 10/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 695

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The SCTP implementation in the Linux kernel up to and including 3.17.2 allows remote malicious users to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
redhat enterprise linux 5.0
redhat enterprise mrg 2.0
canonical ubuntu linux 12.04
debian debian linux 7.0
opensuse evergreen 11.4
suse linux enterprise workstation extension 12
suse suse linux enterprise server 12
suse linux enterprise software development kit 12
suse suse linux enterprise server 11
suse suse linux enterprise server 10
oracle linux 5
oracle linux 6
oracle linux 7

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues, several bugs,and add one enhancement are now available for Red Hat Enterprise Linux 65Extended Update SupportRed Hat Product Secu ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues and several bugs arenow available for Red Hat Enterprise Linux 64 Extended Update SupportRed Hat Product Security has rated this update as having I ...

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues are now availablefor Red Hat Enterprise Linux 62 Advanced Update SupportRed Hat Product Security has rated this update as having Important securityimpact Comm ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact ...

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled malformed Address Configuration Change Chunks (ASCONF) A remote attacker could use either of these flaws to crash the system ...

Several security issues were fixed in the kernel ...

USN-2448-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2447-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

CWE-20 https://bugzilla.redhat.com/show_bug.cgi?id=1147850 https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74 http://www.ubuntu.com/usn/USN-2418-1 http://www.ubuntu.com/usn/USN-2417-1 http://www.debian.org/security/2014/dsa-3060 http://linux.oracle.com/errata/ELSA-2014-3088.html http://linux.oracle.com/errata/ELSA-2014-3087.html http://www.securityfocus.com/bid/70883 http://linux.oracle.com/errata/ELSA-2014-3089.html http://secunia.com/advisories/62428 http://rhn.redhat.com/errata/RHSA-2015-0062.html http://rhn.redhat.com/errata/RHSA-2015-0115.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html http://marc.info/?l=bugtraq&m=142722450701342&w=2 http://marc.info/?l=bugtraq&m=142722544401658&w=2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2015:0062 https://usn.ubuntu.com/2442-1/https://access.redhat.com/security/cve/cve-2014-3673

CVE-2014-3673

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect