Lucene search

[email protected]CVE-2014-0101

HistoryMar 11, 2014 - 1:01 p.m.

CVE-2014-0101

2014-03-1113:01:06

CWE-476

[email protected]

web.nvd.nist.gov

170

cve-2014-0101

sctp

linux kernel

denial of service

remote attackers

security vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.9 Medium

AI Score

Confidence

High

0.918 High

EPSS

Percentile

98.9%

JSON

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

Affected configurations

NVD

Node

linuxlinux_kernelRange2.6.24–3.2.56

linuxlinux_kernelRange3.3–3.4.84

linuxlinux_kernelRange3.5–3.10.34

linuxlinux_kernelRange3.11–3.12.15

linuxlinux_kernelRange3.13–3.13.7

Node

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_eusMatch6.3

redhatenterprise_linux_eusMatch6.4

redhatenterprise_linux_eusMatch6.5

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_server_ausMatch6.4

redhatenterprise_linux_server_ausMatch6.5

redhatenterprise_linux_server_tusMatch6.5

redhatenterprise_linux_workstationMatch6.0

Node

canonicalubuntu_linuxMatch10.04-

Node

f5big-ip_access_policy_managerRange11.1.0–11.5.3

f5big-ip_advanced_firewall_managerRange11.3.0–11.5.3

f5big-ip_analyticsRange11.1.0–11.5.3

f5big-ip_application_acceleration_managerRange11.4.0–11.5.3

f5big-ip_application_security_managerRange11.1.0–11.5.3

f5big-ip_edge_gatewayRange11.1.0–11.3.0

f5big-ip_enterprise_managerRange2.1.0–2.3.0

f5big-ip_enterprise_managerRange3.0.0–3.1.1

f5big-ip_global_traffic_managerRange11.1.0–11.5.3

f5big-ip_link_controllerRange11.1.0–11.5.3

f5big-ip_local_traffic_managerRange11.1.0–11.5.3

f5big-ip_policy_enforcement_managerRange11.3.0–11.5.3

f5big-ip_protocol_security_moduleRange11.1.0–11.4.1

f5big-ip_wan_optimization_managerRange11.1.0–11.3.0

f5big-ip_webacceleratorRange11.1.0–11.3.0

f5big-iq_adcMatch4.5.0

f5big-iq_centralized_managementMatch4.6.0

f5big-iq_cloudRange4.0.0–4.5.0

f5big-iq_deviceRange4.2.0–4.5.0

f5big-iq_securityRange4.0.0–4.5.0

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt3.2.56
linux:linux_kernellinux linux kernellt3.4.84
linux:linux_kernellinux linux kernellt3.10.34
linux:linux_kernellinux linux kernellt3.12.15
linux:linux_kernellinux linux kernellt3.13.7

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	3.2.56
linux:linux_kernel	linux linux kernel	lt	3.4.84
linux:linux_kernel	linux linux kernel	lt	3.10.34
linux:linux_kernel	linux linux kernel	lt	3.12.15
linux:linux_kernel	linux linux kernel	lt	3.13.7