CVE-2014-3673

High

Published: 10/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The SCTP implementation in the Linux kernel through version 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk.

Risk Assessment

Attackers can exploit this vulnerability to remotely crash the system, leading to downtime and potential financial losses for the organization.

Recommendation

It is recommended to update the Linux kernel to version 3.17.3 or later to mitigate this vulnerability.

Other vulnerabilities in Linux kernel SCTP implementation

CVE-2014-3687High
The sctp_assoc_lookup_asconf_ack function in the SCTP implementation in the Linux kernel through version 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

Original NVD description (English source)

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.