A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2941-1 | linux-4.19 security update |
Debian DSA |
DSA-5096-1 | linux security update |
EUVD |
EUVD-2021-27041 | A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses. |
Ubuntu USN |
USN-5165-1 | Linux kernel (OEM) vulnerabilities |
Ubuntu USN |
USN-5265-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-5466-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-5467-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6001-1 | Linux kernel (AWS) vulnerabilities |
Ubuntu USN |
USN-6013-1 | Linux kernel (AWS) vulnerabilities |
Ubuntu USN |
USN-6014-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sat, 12 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-03T17:09:08.707Z
Reserved: 2021-09-06T00:00:00
Link: CVE-2021-3772
No data.
Status : Modified
Published: 2022-03-02T23:15:09.127
Modified: 2024-11-21T06:22:23.343
Link: CVE-2021-3772
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN