CVE-2014-7841
N/A
Published: November 30, 2014 at 01:00 AM UTC
Updated: June 17, 2026 at 12:15 AM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.17.33.0 rc13.0 rc23.0 rc33.0 rc43.0 rc53.0 rc63.0 rc73.0.13.0.103.0.113.0.123.0.133.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.213.0.223.0.233.0.243.0.253.0.263.0.273.0.283.0.293.0.33.0.303.0.313.0.323.0.333.0.343.0.353.0.363.0.373.0.383.0.393.0.43.0.403.0.413.0.423.0.433.0.443.0.453.0.463.0.473.0.483.0.493.0.53.0.503.0.513.0.523.0.533.0.543.0.553.0.563.0.573.0.583.0.593.0.63.0.603.0.613.0.623.0.633.0.643.0.653.0.663.0.673.0.683.0.73.0.83.0.93.13.1 rc13.1 rc23.1 rc33.1 rc43.1.13.1.103.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.93.103.10.03.10.13.10.103.10.113.10.123.10.133.10.143.10.153.10.163.10.173.10.183.10.193.10.23.10.203.10.213.10.223.10.233.10.243.10.253.10.263.10.273.10.283.10.293.10.33.10.43.10.53.10.63.10.73.10.83.10.93.113.11.13.11.103.11.23.11.33.11.43.11.53.11.63.11.73.11.83.11.93.123.12.13.12.103.12.113.12.123.12.133.12.143.12.153.12.163.12.173.12.23.12.33.12.43.12.53.12.63.12.73.12.83.12.93.133.13.13.13.103.13.113.13.23.13.33.13.43.13.53.13.63.13.73.13.83.13.93.143.14 rc13.14 rc23.14 rc33.14 rc43.14 rc53.14 rc63.14 rc73.14 rc83.14.13.14.23.14.33.14.43.14.53.153.15.13.15.23.15.33.15.43.15.53.15.63.15.73.15.83.16.03.16.13.173.17.13.17.23.23.2 rc23.2 rc3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2015-0087.html
References (22)
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2015-0087.htmlQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card