NetSight
IP …
high7.8

CVE-2014-0101

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields bef…

Impact

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24 before 3.2.56
from 3.3 before 3.4.84
from 3.5 before 3.10.34
from 3.11 before 3.12.15
from 3.13 before 3.13.7
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Versions 6.3, 6.4, 6.5
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5
RedhatEnterprise Linux Server Tus
Version 6.5
RedhatEnterprise Linux Workstation
Version 6.0
CanonicalUbuntu Linux
Version 10.04
F5Big-Ip Access Policy Manager
from 11.1.0 through 11.5.3
F5Big-Ip Advanced Firewall Manager
from 11.3.0 through 11.5.3
F5Big-Ip Analytics
from 11.1.0 through 11.5.3
F5Big-Ip Application Acceleration Manager
from 11.4.0 through 11.5.3

Weakness classification

CWE-476

References