7.8

CVE-2014-3673

Exploit
The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.12 < 3.2.64
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.107
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.61
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.34
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.25
Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35
Linux ≫ Linux Kernel Version >= 3.17 < 3.17.4
Redhat ≫ Enterprise Linux Version 5.0
Redhat ≫ Enterprise Mrg Version 2.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Debian ≫ Debian Linux Version 7.0
Opensuse ≫ Evergreen Version 11.4
Suse ≫ Suse Linux Enterprise Server Version 10 Update sp4 SwEdition ltss
Suse ≫ Suse Linux Enterprise Server Version 11 Update sp1 SwEdition ltss
Suse ≫ Suse Linux Enterprise Server Version 11 Update sp2 SwEdition ltss
Oracle ≫ Linux Version 5 Update -
Oracle ≫ Linux Version 6 Update -
Oracle ≫ Linux Version 7 Update -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.46% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2015-0062.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2417-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2418-1
Third Party Advisory
http://marc.info/?l=bugtraq&m=142722450701342&w=2
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=142722544401658&w=2
Third Party Advisory
Mailing List
http://www.debian.org/security/2014/dsa-3060
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74
http://linux.oracle.com/errata/ELSA-2014-3087.html
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-3088.html
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-3089.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2015-0115.html
Third Party Advisory
http://secunia.com/advisories/62428
Broken Link
http://www.securityfocus.com/bid/70883
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1147850
Third Party Advisory
Exploit
Issue Tracking
https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74
Patch
Third Party Advisory
Exploit