NetSight
IP …
medium5.0

CVE-2014-7841

The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote at…

Impact

The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.17.3
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-399

References