CVE-2014-3673

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

7.46%

Published

Nov 10, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20

Affected Products (21)

linux · linux_kernel (up to 3.2.64)vulnerable

linux · linux_kernel (up to 3.4.107)vulnerable

linux · linux_kernel (up to 3.10.61)vulnerable

linux · linux_kernel (up to 3.12.34)vulnerable

linux · linux_kernel (up to 3.14.25)vulnerable

linux · linux_kernel (up to 3.16.35)vulnerable

linux · linux_kernel (up to 3.17.4)vulnerable

redhat · enterprise_linuxvulnerable

redhat · enterprise_mrgvulnerable

canonical · ubuntu_linuxvulnerable

debian · debian_linuxvulnerable

opensuse · evergreenvulnerable

suse · linux_enterprise_software_development_kitvulnerable

suse · linux_enterprise_workstation_extensionvulnerable

suse · suse_linux_enterprise_servervulnerable

oracle · linuxvulnerable

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9de7922bc709eee2f609cd01d98aaedc4cf5ea74

http://linux.oracle.com/errata/ELSA-2014-3087.html

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3088.html

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3089.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html