CVE-2014-7841

The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote…

published November 30, 2014

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05230 · 92.5th percentile
Published
2014-11-30T01:00Z
EPSS history
Timeline
  • 30 NOV 01:00Z
    The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote…
    cvelistv5