NetSight
IP …
high7.5

CVE-2014-3687

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to caus…

Impact

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.27 before 3.2.64
from 3.3 before 3.4.107
from 3.5 before 3.10.61
from 3.11 before 3.12.34
from 3.13 before 3.14.25
from 3.15 before 3.16.35
RedhatEnterprise Mrg
Version 2.0
CanonicalUbuntu Linux
Version 12.04
DebianDebian Linux
Version 7.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Server
Version 12.0
OpensuseEvergreen
Version 11.4
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Software Development Kit
Version 12
SuseLinux Enterprise Workstation Extension
Version 12
SuseSuse Linux Enterprise Server
Version 11
OracleLinux
Versions 5, 6, 7

Weakness classification

CWE-400

References