NetSight
IP …
critical10.0

CVE-2015-1421

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a den…

Impact

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24 before 3.2.67
from 3.3 before 3.4.107
from 3.5 before 3.10.70
from 3.11 before 3.12.38
from 3.13 before 3.14.34
from 3.15 before 3.16.35
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10
DebianDebian Linux
Versions 7.0, 8.0

References