CVE-2014-0101

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

• linux linux kernel (>= 2.6.24 < 3.2.56) • linux linux kernel (>= 3.3 < 3.4.84) • linux linux kernel (>= 3.5 < 3.10.34) • linux linux kernel (>= 3.11 < 3.12.15) • linux linux kernel (>= 3.13 < 3.13.7) • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.3 • redhat enterprise linux eus 6.4 • redhat enterprise linux eus 6.5 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.4 • redhat enterprise linux server aus 6.5 • redhat enterprise linux server tus 6.5 • redhat enterprise linux workstation 6.0 • canonical ubuntu linux 10.04 • f5 big-ip access policy manager (>= 11.1.0 <= 11.5.3) • f5 big-ip advanced firewall manager (>= 11.3.0 <= 11.5.3) • f5 big-ip analytics (>= 11.1.0 <= 11.5.3) • f5 big-ip application acceleration manager (>= 11.4.0 <= 11.5.3) • f5 big-ip application security manager (>= 11.1.0 <= 11.5.3) • f5 big-ip edge gateway (>= 11.1.0 <= 11.3.0) • f5 big-ip enterprise manager (>= 2.1.0 <= 2.3.0) • f5 big-ip enterprise manager (>= 3.0.0 <= 3.1.1) • f5 big-ip global traffic manager (>= 11.1.0 <= 11.5.3) • f5 big-ip link controller (>= 11.1.0 <= 11.5.3) • f5 big-ip local traffic manager (>= 11.1.0 <= 11.5.3) • f5 big-ip policy enforcement manager (>= 11.3.0 <= 11.5.3) • f5 big-ip protocol security module (>= 11.1.0 <= 11.4.1) • f5 big-ip wan optimization manager (>= 11.1.0 <= 11.3.0) • f5 big-ip webaccelerator (>= 11.1.0 <= 11.3.0) • f5 big-iq adc 4.5.0 • f5 big-iq centralized management 4.6.0 • f5 big-iq cloud (>= 4.0.0 <= 4.5.0) • f5 big-iq device (>= 4.2.0 <= 4.5.0) • f5 big-iq security (>= 4.0.0 <= 4.5.0)