10

CVE-2015-1421

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.24 < 3.2.67
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.107
Linux ≫ Linux Kernel Version >= 3.5 < 3.10.70
Linux ≫ Linux Kernel Version >= 3.11 < 3.12.38
Linux ≫ Linux Kernel Version >= 3.13 < 3.14.34
Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.8
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.10
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.83% 0.95
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2015-0782.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0864.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
Third Party Advisory
Mailing List
http://www.debian.org/security/2015/dsa-3170
Third Party Advisory
http://www.ubuntu.com/usn/USN-2541-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2542-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2545-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2546-1
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0726.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0751.html
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=600ddd6825543962fb807884169e57b580dba208
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2015-1082.html
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/01/29/15
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/72356
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032172
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2562-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2563-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1196581
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208
Third Party Advisory