CVE-2014-3687
HighSummary
The sctp_assoc_lookup_asconf_ack function in the SCTP implementation in the Linux kernel through version 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
Risk Assessment
Attackers can cause system crashes, leading to service availability interruptions. This can affect organizational continuity and user trust.
Recommendation
It is recommended to update the Linux kernel to version 3.17.3 or later to mitigate this vulnerability.
Other vulnerabilities in Linux kernel SCTP implementation
Original NVD description (English source)
The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.