kernel: sctp: sk_ack_backlog wrap-around problem

🗓️ 22 Jul 2014 18:00:11Reported by RedHatType

An integer underflow flaw in the Linux kernel SCTP handling of Cookie Echo packets could allow a remote attacker to prevent legitimate connections to a specific SCTP server socket.

Reporter	Title	Published	Views	Family All 341
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	x86_64	kernel-rt	0:3.10.33-rt32.43.el6rt	kernel-rt-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug	0:3.10.33-rt32.43.el6rt	kernel-rt-debug-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug-debuginfo	0:3.10.33-rt32.43.el6rt	kernel-rt-debug-debuginfo-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug-devel	0:3.10.33-rt32.43.el6rt	kernel-rt-debug-devel-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debuginfo	0:3.10.33-rt32.43.el6rt	kernel-rt-debuginfo-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debuginfo-common-x86_64	0:3.10.33-rt32.43.el6rt	kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-devel	0:3.10.33-rt32.43.el6rt	kernel-rt-devel-0:3.10.33-rt32.43.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	any	kernel-rt-doc	0:3.10.33-rt32.43.el6rt	kernel-rt-doc-0:3.10.33-rt32.43.el6rt.noarch.rpm
Red Hat Enterprise Linux	6	any	kernel-rt-firmware	0:3.10.33-rt32.43.el6rt	kernel-rt-firmware-0:3.10.33-rt32.43.el6rt.noarch.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-trace	0:3.10.33-rt32.43.el6rt	kernel-rt-trace-0:3.10.33-rt32.43.el6rt.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2014-4667
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-4667
cve	www.cve.org/CVERecord

21 Nov 2025 17:49Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

EPSS0.05926

CWE-190