Lucene search

K
cvelistRedhatCVELIST:CVE-2014-3687
HistoryNov 10, 2014 - 11:00 a.m.

CVE-2014-3687

2014-11-1011:00:00
redhat
www.cve.org
1

7.2 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

References

7.2 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%