Published: 30/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The SCTP implementation in the Linux kernel prior to 3.17.4 allows remote malicious users to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.0.25
linux linux kernel 3.15.8
linux linux kernel 3.1.2
linux linux kernel 3.10.8
linux linux kernel 3.15.1
linux linux kernel 3.0
linux linux kernel 3.0.22
linux linux kernel 3.12
linux linux kernel 3.0.5
linux linux kernel 3.0.68
linux linux kernel 3.14
linux linux kernel 3.13.1
linux linux kernel 3.0.38
linux linux kernel 3.13.10
linux linux kernel 3.1
linux linux kernel 3.0.63
linux linux kernel 3.0.46
linux linux kernel 3.10.24
linux linux kernel 3.13.11
linux linux kernel 3.0.47
linux linux kernel 3.0.48
linux linux kernel 3.15.3
linux linux kernel 3.0.18
linux linux kernel 3.14.3
linux linux kernel 3.11.8
linux linux kernel 3.15.6
linux linux kernel 3.0.6
linux linux kernel 3.14.1
linux linux kernel 3.0.36
linux linux kernel 3.0.35
linux linux kernel 3.10.6
linux linux kernel 3.0.11
linux linux kernel 3.17.2
linux linux kernel 3.12.14
linux linux kernel 3.0.58
linux linux kernel 3.0.34
linux linux kernel 3.15.4
linux linux kernel 3.10.1
linux linux kernel 3.10.7
linux linux kernel 3.11.10
linux linux kernel 3.13.6
linux linux kernel 3.0.32
linux linux kernel 3.13.4
linux linux kernel 3.2
linux linux kernel 3.0.52
linux linux kernel 3.0.51
linux linux kernel 3.11.1
linux linux kernel 3.10.15
linux linux kernel 3.12.15
linux linux kernel 3.0.57
linux linux kernel 3.11
linux linux kernel 3.13
linux linux kernel 3.0.19
linux linux kernel 3.0.37
linux linux kernel 3.0.4
linux linux kernel 3.0.27
linux linux kernel
linux linux kernel 3.11.9
linux linux kernel 3.10.26
linux linux kernel 3.10
linux linux kernel 3.10.5
linux linux kernel 3.12.6
linux linux kernel 3.0.42
linux linux kernel 3.0.23
linux linux kernel 3.0.62
linux linux kernel 3.16.0
linux linux kernel 3.0.49
linux linux kernel 3.10.20
linux linux kernel 3.0.8
linux linux kernel 3.10.9
linux linux kernel 3.10.2
linux linux kernel 3.13.3
linux linux kernel 3.13.2
linux linux kernel 3.10.10
linux linux kernel 3.13.5
linux linux kernel 3.10.18
linux linux kernel 3.13.9
linux linux kernel 3.0.64
linux linux kernel 3.0.40
linux linux kernel 3.0.33
linux linux kernel 3.12.7
linux linux kernel 3.0.28
linux linux kernel 3.10.29
linux linux kernel 3.14.2
linux linux kernel 3.11.4
linux linux kernel 3.14.4
linux linux kernel 3.12.8
linux linux kernel 3.10.12
linux linux kernel 3.0.54
linux linux kernel 3.10.19
linux linux kernel 3.10.28
linux linux kernel 3.0.13
linux linux kernel 3.0.55
linux linux kernel 3.17
linux linux kernel 3.0.10
linux linux kernel 3.10.16
linux linux kernel 3.0.1
linux linux kernel 3.1.6
linux linux kernel 3.12.4
linux linux kernel 3.12.12
linux linux kernel 3.11.7
linux linux kernel 3.12.5
linux linux kernel 3.11.3
linux linux kernel 3.10.4
linux linux kernel 3.0.17
linux linux kernel 3.1.3
linux linux kernel 3.16.1
linux linux kernel 3.10.3
linux linux kernel 3.10.23
linux linux kernel 3.1.9
linux linux kernel 3.0.44
linux linux kernel 3.12.17
linux linux kernel 3.0.16
linux linux kernel 3.0.21
linux linux kernel 3.0.7
linux linux kernel 3.0.61
linux linux kernel 3.11.6
linux linux kernel 3.17.1
linux linux kernel 3.1.5
linux linux kernel 3.1.8
linux linux kernel 3.12.3
linux linux kernel 3.10.13
linux linux kernel 3.0.20
linux linux kernel 3.12.1
linux linux kernel 3.0.24
linux linux kernel 3.0.15
linux linux kernel 3.0.45
linux linux kernel 3.0.39
linux linux kernel 3.12.16
linux linux kernel 3.10.0
linux linux kernel 3.0.2
linux linux kernel 3.10.22
linux linux kernel 3.0.67
linux linux kernel 3.12.11
linux linux kernel 3.0.59
linux linux kernel 3.12.9
linux linux kernel 3.12.10
linux linux kernel 3.15.7
linux linux kernel 3.11.2
linux linux kernel 3.0.60
linux linux kernel 3.1.7
linux linux kernel 3.1.1
linux linux kernel 3.15.2
linux linux kernel 3.0.56
linux linux kernel 3.15
linux linux kernel 3.12.2
linux linux kernel 3.0.12
linux linux kernel 3.10.17
linux linux kernel 3.10.11
linux linux kernel 3.15.5
linux linux kernel 3.13.8
linux linux kernel 3.1.10
linux linux kernel 3.10.27
linux linux kernel 3.10.21
linux linux kernel 3.0.66
linux linux kernel 3.12.13
linux linux kernel 3.0.3
linux linux kernel 3.14.5
linux linux kernel 3.0.65
linux linux kernel 3.0.53
linux linux kernel 3.0.9
linux linux kernel 3.0.26
linux linux kernel 3.1.4
linux linux kernel 3.0.43
linux linux kernel 3.0.30
linux linux kernel 3.0.31
linux linux kernel 3.0.29
linux linux kernel 3.0.50
linux linux kernel 3.0.14
linux linux kernel 3.11.5
linux linux kernel 3.10.25
linux linux kernel 3.0.41
linux linux kernel 3.10.14
linux linux kernel 3.13.7

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues, several bugs,and add one enhancement are now available for Red Hat Enterprise Linux 65Extended Update SupportRed Hat Product Secu ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues and several bugs arenow available for Red Hat Enterprise Linux 64 Extended Update SupportRed Hat Product Security has rated this update as having I ...

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues are now availablefor Red Hat Enterprise Linux 62 Advanced Update SupportRed Hat Product Security has rated this update as having Important securityimpact Comm ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact ...

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled the association's output queue A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service ...

Several security issues were fixed in the kernel ...

USN-2448-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2447-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

CWE-399 http://www.openwall.com/lists/oss-security/2014/11/13/8 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 https://bugzilla.redhat.com/show_bug.cgi?id=1155745 https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4 http://www.ubuntu.com/usn/USN-2418-1 http://www.ubuntu.com/usn/USN-2417-1 http://www.debian.org/security/2014/dsa-3060 http://rhn.redhat.com/errata/RHSA-2015-0062.html http://rhn.redhat.com/errata/RHSA-2015-0115.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://marc.info/?l=bugtraq&m=142722450701342&w=2 http://marc.info/?l=bugtraq&m=142722544401658&w=2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2015:0062 https://access.redhat.com/security/cve/cve-2014-3688 https://usn.ubuntu.com/2442-1/

Get Started

CVE-2014-3688

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect