K15317 : Linux kernel vulnerability CVE-2014-0101

Security Advisory Description

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk. (CVE-2014-0101)
Impact
Remote attackers may be able to cause a denial-of-service (DoS) using a crafted SCTP handshake.

Note: The BIG-IP/BIG-IQ/Enterprise Manager software contains vulnerable code (SCTP kernel module), but the code is not enabled by default. Before a remote attacker can exploit this vulnerability, a locally authenticated administrative user must load the vulnerable SCTP kernel module, create a listener (such as self IP) on the control plane, and allow SCTP traffic on this listener. Because of the specific conditions required for exploit, F5 Product Development considers affected BIG-IP/BIG-IQ/Enterprise Manager systems as not vulnerable in a standard configuration, and severely vulnerable if the described conditions are met.