Veracode Vulnerability DatabaseVERACODE:16088Denial Of Service (DoS)
0.025 Low
EPSS
Percentile
90.2%
kernel is vulnerable to denial of service (DoS). The vulnerability exists when SCTP authentication is enabled, when establishing an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1be9a950c646c9092fb3618197f7b6bfb50e82aa
lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
rhn.redhat.com/errata/RHSA-2014-1083.html
rhn.redhat.com/errata/RHSA-2014-1668.html
rhn.redhat.com/errata/RHSA-2014-1763.html
secunia.com/advisories/59777
secunia.com/advisories/60430
secunia.com/advisories/60545
secunia.com/advisories/60564
secunia.com/advisories/60744
secunia.com/advisories/62563
www.openwall.com/lists/oss-security/2014/07/26/1
www.securityfocus.com/bid/68881
www.securitytracker.com/id/1030681
www.ubuntu.com/usn/USN-2334-1
www.ubuntu.com/usn/USN-2335-1
www.ubuntu.com/usn/USN-2358-1
www.ubuntu.com/usn/USN-2359-1
access.redhat.com/errata/RHSA-2014:1083
access.redhat.com/errata/RHSA-2014:1392
access.redhat.com/errata/RHSA-2014:1668
access.redhat.com/errata/RHSA-2014:1724
access.redhat.com/errata/RHSA-2014:1763
access.redhat.com/errata/RHSA-2014:1872
access.redhat.com/security/cve/CVE-2014-5077
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1122982
exchange.xforce.ibmcloud.com/vulnerabilities/95134
github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa
rhn.redhat.com/errata/RHSA-2014-1083.html
Related
