CVE-2014-4667

The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows…

published July 3, 2014

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05926 · 93.2th percentile
Published
2014-07-03T01:00Z
EPSS history
Timeline
  • 03 JUL 01:00Z
    The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows…
    cvelistv5