CVE-2021-3772CWE-354

A flaw was found in the Linux SCTP stack

published March 2, 2022

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01240 · 68.9th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2022-03-02T00:00Z
EPSS history
Timeline
  • 02 MAR 00:00Z
    A flaw was found in the Linux SCTP stack
    cvelistv5