Published: 30/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel prior to 3.17.4, when ASCONF is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.0.25
linux linux kernel 3.15.8
linux linux kernel 3.1.2
linux linux kernel 3.10.8
linux linux kernel 3.15.1
linux linux kernel 3.0
linux linux kernel 3.0.22
linux linux kernel 3.12
linux linux kernel 3.0.5
linux linux kernel 3.0.68
linux linux kernel 3.14
linux linux kernel 3.13.1
linux linux kernel 3.0.38
linux linux kernel 3.13.10
linux linux kernel 3.1
linux linux kernel 3.0.63
linux linux kernel 3.0.46
linux linux kernel 3.10.24
linux linux kernel 3.13.11
linux linux kernel 3.0.47
linux linux kernel 3.0.48
linux linux kernel 3.15.3
linux linux kernel 3.0.18
linux linux kernel 3.14.3
linux linux kernel 3.11.8
linux linux kernel 3.15.6
linux linux kernel 3.0.6
linux linux kernel 3.14.1
linux linux kernel 3.0.36
linux linux kernel 3.0.35
linux linux kernel 3.10.6
linux linux kernel 3.0.11
linux linux kernel 3.17.2
linux linux kernel 3.12.14
linux linux kernel 3.0.58
linux linux kernel 3.0.34
linux linux kernel 3.15.4
linux linux kernel 3.10.1
linux linux kernel 3.10.7
linux linux kernel 3.11.10
linux linux kernel 3.13.6
linux linux kernel 3.0.32
linux linux kernel 3.13.4
linux linux kernel 3.2
linux linux kernel 3.0.52
linux linux kernel 3.0.51
linux linux kernel 3.11.1
linux linux kernel 3.10.15
linux linux kernel 3.12.15
linux linux kernel 3.0.57
linux linux kernel 3.11
linux linux kernel 3.13
linux linux kernel 3.0.19
linux linux kernel 3.0.37
linux linux kernel 3.0.4
linux linux kernel 3.0.27
linux linux kernel
linux linux kernel 3.11.9
linux linux kernel 3.10.26
linux linux kernel 3.10
linux linux kernel 3.10.5
linux linux kernel 3.12.6
linux linux kernel 3.0.42
linux linux kernel 3.0.23
linux linux kernel 3.0.62
linux linux kernel 3.16.0
linux linux kernel 3.0.49
linux linux kernel 3.10.20
linux linux kernel 3.0.8
linux linux kernel 3.10.9
linux linux kernel 3.10.2
linux linux kernel 3.13.3
linux linux kernel 3.13.2
linux linux kernel 3.10.10
linux linux kernel 3.13.5
linux linux kernel 3.10.18
linux linux kernel 3.13.9
linux linux kernel 3.0.64
linux linux kernel 3.0.40
linux linux kernel 3.0.33
linux linux kernel 3.12.7
linux linux kernel 3.0.28
linux linux kernel 3.10.29
linux linux kernel 3.14.2
linux linux kernel 3.11.4
linux linux kernel 3.14.4
linux linux kernel 3.12.8
linux linux kernel 3.10.12
linux linux kernel 3.0.54
linux linux kernel 3.10.19
linux linux kernel 3.10.28
linux linux kernel 3.0.13
linux linux kernel 3.0.55
linux linux kernel 3.17
linux linux kernel 3.0.10
linux linux kernel 3.10.16
linux linux kernel 3.0.1
linux linux kernel 3.1.6
linux linux kernel 3.12.4
linux linux kernel 3.12.12
linux linux kernel 3.11.7
linux linux kernel 3.12.5
linux linux kernel 3.11.3
linux linux kernel 3.10.4
linux linux kernel 3.0.17
linux linux kernel 3.1.3
linux linux kernel 3.16.1
linux linux kernel 3.10.3
linux linux kernel 3.10.23
linux linux kernel 3.1.9
linux linux kernel 3.0.44
linux linux kernel 3.12.17
linux linux kernel 3.0.16
linux linux kernel 3.0.21
linux linux kernel 3.0.7
linux linux kernel 3.0.61
linux linux kernel 3.11.6
linux linux kernel 3.17.1
linux linux kernel 3.1.5
linux linux kernel 3.1.8
linux linux kernel 3.12.3
linux linux kernel 3.10.13
linux linux kernel 3.0.20
linux linux kernel 3.12.1
linux linux kernel 3.0.24
linux linux kernel 3.0.15
linux linux kernel 3.0.45
linux linux kernel 3.0.39
linux linux kernel 3.12.16
linux linux kernel 3.10.0
linux linux kernel 3.0.2
linux linux kernel 3.10.22
linux linux kernel 3.0.67
linux linux kernel 3.12.11
linux linux kernel 3.0.59
linux linux kernel 3.12.9
linux linux kernel 3.12.10
linux linux kernel 3.15.7
linux linux kernel 3.11.2
linux linux kernel 3.0.60
linux linux kernel 3.1.7
linux linux kernel 3.1.1
linux linux kernel 3.15.2
linux linux kernel 3.0.56
linux linux kernel 3.15
linux linux kernel 3.12.2
linux linux kernel 3.0.12
linux linux kernel 3.10.17
linux linux kernel 3.10.11
linux linux kernel 3.15.5
linux linux kernel 3.13.8
linux linux kernel 3.1.10
linux linux kernel 3.10.27
linux linux kernel 3.10.21
linux linux kernel 3.0.66
linux linux kernel 3.12.13
linux linux kernel 3.0.3
linux linux kernel 3.14.5
linux linux kernel 3.0.65
linux linux kernel 3.0.53
linux linux kernel 3.0.9
linux linux kernel 3.0.26
linux linux kernel 3.1.4
linux linux kernel 3.0.43
linux linux kernel 3.0.30
linux linux kernel 3.0.31
linux linux kernel 3.0.29
linux linux kernel 3.0.50
linux linux kernel 3.0.14
linux linux kernel 3.11.5
linux linux kernel 3.10.25
linux linux kernel 3.0.41
linux linux kernel 3.10.14
linux linux kernel 3.13.7

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-7841 Liu Wei of Red Hat discovered that a SCTP server doing ASCONF will panic on malformed INIT chunks by triggering a NULL pointer dereference CVE-2014-8369 A flaw was discovered in the way iommu ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having Important securityimpact ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 65 Extended Update SupportRed Hat Product Security has rated this update as havin ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix one security issue and three bugs are nowavailable for Red Hat Enterprise Linux 64 Extended Update SupportRed Hat Product Security has rated this update as having Import ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix two security issues and several bugs arenow available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact Com ...

The sctp_process_param function in net/sctp/sm_make_chunkc in the SCTP implementation in the Linux kernel before 3174, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk (CVE-2014-7841) The pivot_root implementation in fs/namespacec in the Linux kerne ...

Several security issues were fixed in the kernel ...

A flaw was found in the way the Linux kernel's SCTP implementation validated INIT chunks when performing Address Configuration Change (ASCONF) A remote attacker could use this flaw to crash the system by sending a specially crafted SCTP packet to trigger a NULL pointer dereference on the system ...

CWE-399 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 https://bugzilla.redhat.com/show_bug.cgi?id=1163087 http://www.openwall.com/lists/oss-security/2014/11/13/6 http://secunia.com/advisories/62305 http://www.debian.org/security/2014/dsa-3093 http://rhn.redhat.com/errata/RHSA-2015-0285.html http://rhn.redhat.com/errata/RHSA-2015-0087.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://rhn.redhat.com/errata/RHSA-2015-0284.html http://rhn.redhat.com/errata/RHSA-2015-0102.html http://rhn.redhat.com/errata/RHSA-2015-0695.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html https://support.f5.com/kb/en-us/solutions/public/16000/000/sol16016.html http://www.securityfocus.com/bid/71081 http://secunia.com/advisories/62735 http://secunia.com/advisories/62597 http://linux.oracle.com/errata/ELSA-2015-3005.html http://linux.oracle.com/errata/ELSA-2015-3004.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40607cbe270a9e8360907cb1e62ddf0736e4864 https://nvd.nist.gov https://www.debian.org/security/./dsa-3093 https://usn.ubuntu.com/2467-1/https://access.redhat.com/security/cve/cve-2014-7841

Get Started

CVE-2014-7841

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect