NetSight
IP …
high7.5

CVE-2014-3673

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, re…

Impact

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12 before 3.2.64
from 3.3 before 3.4.107
from 3.5 before 3.10.61
from 3.11 before 3.12.34
from 3.13 before 3.14.25
from 3.15 before 3.16.35
RedhatEnterprise Linux
Version 5.0
RedhatEnterprise Mrg
Version 2.0
CanonicalUbuntu Linux
Version 12.04
DebianDebian Linux
Version 7.0
OpensuseEvergreen
Version 11.4
SuseLinux Enterprise Software Development Kit
Version 12
SuseLinux Enterprise Workstation Extension
Version 12
SuseSuse Linux Enterprise Server
Versions 10, 11, 12
OracleLinux
Versions 5, 6, 7

Weakness classification

CWE-20

References