Description
The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-118-1 | linux-2.6 security update |
Debian DSA |
DSA-3093-1 | linux security update |
Ubuntu USN |
USN-2441-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2442-1 | Linux kernel (EC2) vulnerabilities |
Ubuntu USN |
USN-2443-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2444-1 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-2465-1 | Linux kernel (Trusty HWE) vulnerabilities |
Ubuntu USN |
USN-2466-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2467-1 | Linux kernel (Utopic HWE) vulnerabilities |
Ubuntu USN |
USN-2468-1 | Linux kernel vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T13:03:26.885Z
Reserved: 2014-10-03T00:00:00.000Z
Link: CVE-2014-7841
No data.
Status : Modified
Published: 2014-11-30T01:59:03.493
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-7841
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN