[Forgot Password]
Login  Register Subscribe

23631

 
 

126941

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2014-4667

Date: (C)2014-07-03   (M)2017-11-18 


The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.

CVSS Score: 5.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: NONE
 Availability: PARTIAL





Reference:
SECUNIA-59777
SECUNIA-59790
SECUNIA-60564
SECUNIA-60596
BID-68224
DSA-2992
SUSE-SU-2014:1316
SUSE-SU-2014:1319
SUSE-SU-2015:0812
USN-2334-1
USN-2335-1
http://www.openwall.com/lists/oss-security/2014/06/27/11
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d3217b15a19a4779c39b212358a5c71d725822ee
http://linux.oracle.com/errata/ELSA-2014-3068.html
http://linux.oracle.com/errata/ELSA-2014-3069.html
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
https://bugzilla.redhat.com/show_bug.cgi?id=1113967
https://github.com/torvalds/linux/commit/d3217b15a19a4779c39b212358a5c71d725822ee

CPE    380
cpe:/o:linux:linux_kernel:3.6.10
cpe:/o:linux:linux_kernel:3.6.11
cpe:/o:linux:linux_kernel:3.9.3
cpe:/o:linux:linux_kernel:3.9.2
...
CWE    1
CWE-20
OVAL    23
oval:org.secpod.oval:def:501381
oval:org.secpod.oval:def:203419
oval:org.secpod.oval:def:1500675
oval:org.secpod.oval:def:1500674
...

© 2013 SecPod Technologies