Description
A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Published: 2022-03-02
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-2941-1 linux-4.19 security update
Debian DSA Debian DSA DSA-5096-1 linux security update
EUVD EUVD EUVD-2021-27041 A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Ubuntu USN Ubuntu USN USN-5165-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5265-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5466-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5467-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6001-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6013-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6014-1 Linux kernel vulnerabilities
History

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00161}

epss

{'score': 0.00148}


Subscriptions

Debian Debian Linux
Linux Linux Kernel
Netapp E-series Santricity Os Controller H300s H300s Firmware H410c H410c Firmware H410s H410s Firmware H500s H500s Firmware H610c H610c Firmware H610s H610s Firmware H615c H615c Firmware H700s H700s Firmware Hci Compute Node Solidfire \& Hci Management Node Solidfire \& Hci Storage Node
Oracle Communications Cloud Native Core Binding Support Function Communications Cloud Native Core Network Exposure Function Communications Cloud Native Core Policy
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-03T17:09:08.707Z

Reserved: 2021-09-06T00:00:00.000Z

Link: CVE-2021-3772

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-02T23:15:09.127

Modified: 2024-11-21T06:22:23.343

Link: CVE-2021-3772

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-09-08T06:38:00Z

Links: CVE-2021-3772 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses