Published: 10/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 695

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel up to and including 3.17.2 allows remote malicious users to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
redhat enterprise mrg 2.0
canonical ubuntu linux 12.04
opensuse evergreen 11.4
novell suse linux enterprise server 12.0
suse linux enterprise real time extension 11
debian debian linux 7.0
novell suse linux enterprise desktop 12.0
suse linux enterprise workstation extension 12
suse linux enterprise software development kit 12
suse suse linux enterprise server 11
oracle linux 5
oracle linux 6
oracle linux 7

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues, several bugs,and add one enhancement are now available for Red Hat Enterprise Linux 65Extended Update SupportRed Hat Product Secu ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues and several bugs arenow available for Red Hat Enterprise Linux 64 Extended Update SupportRed Hat Product Security has rated this update as having I ...

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues are now availablefor Red Hat Enterprise Linux 62 Advanced Update SupportRed Hat Product Security has rated this update as having Important securityimpact Comm ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact ...

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled duplicate Address Configuration Change Chunks (ASCONF) A remote attacker could use either of these flaws to crash the system ...

Several security issues were fixed in the kernel ...

USN-2448-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2447-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

CWE-400 https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395 https://bugzilla.redhat.com/show_bug.cgi?id=1155731 http://www.ubuntu.com/usn/USN-2418-1 http://www.ubuntu.com/usn/USN-2417-1 http://www.debian.org/security/2014/dsa-3060 http://www.securityfocus.com/bid/70766 http://linux.oracle.com/errata/ELSA-2014-3088.html http://linux.oracle.com/errata/ELSA-2014-3087.html http://linux.oracle.com/errata/ELSA-2014-3089.html http://secunia.com/advisories/62428 http://rhn.redhat.com/errata/RHSA-2015-0062.html http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html http://rhn.redhat.com/errata/RHSA-2015-0115.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://marc.info/?l=bugtraq&m=142722450701342&w=2 http://marc.info/?l=bugtraq&m=142722544401658&w=2 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69040d8e39f20d5215a03502a8e8b4c6ab78395 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2015:0062 https://usn.ubuntu.com/2442-1/https://access.redhat.com/security/cve/cve-2014-3687

CVE-2014-3687

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect