NetSight
IP …
medium6.5

CVE-2019-3874

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem.

Impact

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.10.1 through 3.10.108
from 4.18.1 through 4.18.20
DebianDebian Linux
Version 8.0
RedhatEnterprise Linux
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10, 19.04
NetappActive Iq Unified Manager For Vmware Vsphere
from 9.5
NetappHci Management Node
All versions
NetappSnapprotect
All versions
NetappSolidfire
All versions
NetappCn1610 Firmware
All versions

Weakness classification

CWE-400

References