NetSight
IP …
medium6.5

CVE-2021-3772

A flaw was found in the Linux SCTP stack.

Impact

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.15.0
RedhatEnterprise Linux
Version 8.0
DebianDebian Linux
Versions 9.0, 10.0
OracleCommunications Cloud Native Core Binding Support Function
Version 22.1.3
OracleCommunications Cloud Native Core Network Exposure Function
Version 22.1.1
OracleCommunications Cloud Native Core Policy
Version 22.2.0
NetappE-Series Santricity Os Controller
Versions 11.0, 11.0.0, 11.20, 11.25, 11.30, 11.30.5r3
NetappSolidfire \& Hci Management Node
All versions
NetappSolidfire \& Hci Storage Node
All versions
NetappHci Compute Node
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions

Weakness classification

CWE-354

References