CVE-2014-3687: High severity linux kernel vulnerability
Kernel panic is encountered when sctp stack receives duplicate asconf chunks.
Upstream commmit:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b69040d8e39f20d5215a03502a8e8b4c6ab78395
Other sources
The sctpassoclookupasconfack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3687?
CVE-2014-3687 is classified as a high severity vulnerability due to its potential to cause kernel panic.
How do I fix CVE-2014-3687?
To fix CVE-2014-3687, update your Linux kernel to a version that includes the upstream commit addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2014-3687?
CVE-2014-3687 affects Linux kernel versions from 2.6.27 up to several versions in the 3.x series.
Is CVE-2014-3687 related to any specific Linux distributions?
Yes, CVE-2014-3687 affects multiple Linux distributions including Debian, Ubuntu, and CentOS.
What kind of attack does CVE-2014-3687 enable?
CVE-2014-3687 can be exploited through specially crafted SCTP packets that lead to a denial of service through kernel panic.