The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-118-1 | linux-2.6 security update |
Debian DSA |
DSA-3093-1 | linux security update |
Ubuntu USN |
USN-2441-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2442-1 | Linux kernel (EC2) vulnerabilities |
Ubuntu USN |
USN-2443-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2444-1 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-2465-1 | Linux kernel (Trusty HWE) vulnerabilities |
Ubuntu USN |
USN-2466-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2467-1 | Linux kernel (Utopic HWE) vulnerabilities |
Ubuntu USN |
USN-2468-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T13:03:26.885Z
Reserved: 2014-10-03T00:00:00
Link: CVE-2014-7841
No data.
Status : Deferred
Published: 2014-11-30T01:59:03.493
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-7841
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN