Published: 16/03/2015 Updated: 07/11/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel prior to 3.18.8 allows remote malicious users to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 14.10
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
debian debian linux 8.0
debian debian linux 7.0

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leaks or privilege escalation CVE-2013-7421 / CVE-2014-9644 It was discovered that the Crypto API allowed unprivileged users to load arbitrary kernel modules A local user can use this flaw to exploit vulnerabilities ...

Several security issues were fixed in the kernel ...

A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system ...

NVD-CWE-Other https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208 http://www.openwall.com/lists/oss-security/2015/01/29/15 https://bugzilla.redhat.com/show_bug.cgi?id=1196581 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8 http://www.debian.org/security/2015/dsa-3170 http://www.ubuntu.com/usn/USN-2541-1 http://www.ubuntu.com/usn/USN-2542-1 http://rhn.redhat.com/errata/RHSA-2015-0726.html http://rhn.redhat.com/errata/RHSA-2015-0751.html http://www.ubuntu.com/usn/USN-2545-1 http://www.ubuntu.com/usn/USN-2546-1 http://rhn.redhat.com/errata/RHSA-2015-0782.html http://www.securitytracker.com/id/1032172 http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html http://www.ubuntu.com/usn/USN-2563-1 http://www.ubuntu.com/usn/USN-2562-1 http://www.securityfocus.com/bid/72356 http://rhn.redhat.com/errata/RHSA-2015-1082.html http://rhn.redhat.com/errata/RHSA-2015-0864.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=600ddd6825543962fb807884169e57b580dba208 https://nvd.nist.gov https://www.debian.org/security/./dsa-3170 https://usn.ubuntu.com/2542-1/https://access.redhat.com/security/cve/cve-2015-1421

CVE-2015-1421

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect