Security Advisory

CVE-2014-3687

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-11-10 11:00:00
Last updated 2024-08-06 10:50:18
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.