CVE-2013-2206

The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle…

published July 4, 2013

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04707 · 91.8th percentile
Published
2013-07-04T21:00Z
EPSS history
Timeline
  • 04 JUL 21:00Z
    The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle…
    cvelistv5