CVEvulnerability
CVE-2014-5077
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-08-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-476
Description
The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
Affected configurations
• linux linux kernel (>= 2.6.24 < 3.2.63)
• linux linux kernel (>= 3.3 < 3.4.103)
• linux linux kernel (>= 3.5 < 3.10.53)
• linux linux kernel (>= 3.11 < 3.12.27)
• linux linux kernel (>= 3.13 < 3.14.17)
• linux linux kernel (>= 3.15 < 3.15.10)
• suse linux enterprise desktop 11
• suse linux enterprise real time extension 11
• suse linux enterprise server 11
• redhat enterprise linux eus 6.5
• redhat enterprise linux server aus 6.2
• redhat enterprise linux server aus 6.5
• redhat enterprise linux server tus 6.5
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1083.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1668.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1763.html Third Party Advisory
- http://secunia.com/advisories/59777 Third Party Advisory
- http://secunia.com/advisories/60430 Third Party Advisory
- http://secunia.com/advisories/60545 Third Party Advisory
- http://secunia.com/advisories/60564 Third Party Advisory
- http://secunia.com/advisories/60744 Third Party Advisory
- http://secunia.com/advisories/62563 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/07/26/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/68881 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030681 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2334-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2335-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2358-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2359-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1122982 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95134 Third Party Advisory, VDB Entry
- https://github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa Patch, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1083.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1668.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1763.html Third Party Advisory
- http://secunia.com/advisories/59777 Third Party Advisory
- http://secunia.com/advisories/60430 Third Party Advisory
- http://secunia.com/advisories/60545 Third Party Advisory
- http://secunia.com/advisories/60564 Third Party Advisory
- http://secunia.com/advisories/60744 Third Party Advisory
- http://secunia.com/advisories/62563 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/07/26/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/68881 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030681 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2334-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2335-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2358-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2359-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1122982 Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95134 Third Party Advisory, VDB Entry
- https://github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa Patch, Third Party Advisory