CVE-2014-0101

Linux Kernel 2.6.24-3.13.6 - Denial of Service via SCTP Handshake with Modified INIT and Crafted AUTH Chunks

Title source: llm
STIX 2.1

Description

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65943
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0328.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2173-1
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0432.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2174-1
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0419.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59216
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1070705
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/03/04/6

Scores

EPSS 0.0309
EPSS Percentile 87.0%

Details

CWE
CWE-476
Status published
Products (30)
canonical/ubuntu_linux 10.04
f5/big-ip_access_policy_manager 11.1.0 - 11.5.3
f5/big-ip_advanced_firewall_manager 11.3.0 - 11.5.3
f5/big-ip_analytics 11.1.0 - 11.5.3
f5/big-ip_application_acceleration_manager 11.4.0 - 11.5.3
f5/big-ip_application_security_manager 11.1.0 - 11.5.3
f5/big-ip_edge_gateway 11.1.0 - 11.3.0
f5/big-ip_enterprise_manager 2.1.0 - 2.3.0
f5/big-ip_global_traffic_manager 11.1.0 - 11.5.3
f5/big-ip_link_controller 11.1.0 - 11.5.3
... and 20 more
Published Mar 11, 2014
Tracked Since Feb 18, 2026