CVE-2014-3688: Medium severity linux kernel vulnerability
Published Oct 22, 2014
·Updated
It was found that Linux kernel's sctp stack is prone to remotely triggerable memory pressure issue caused by excessive queueing.
A remote attacker could use this flaw to cause denial-of-service conditions on the system.
Upstream commmit:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26b87c7881006311828bb0ab271a551a62dcceb4
Other sources
The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/smstatefuns.c.
— Launchpad
Affected Software
205 affected componentsFixes available
Linux Linux kernel<=3.17.3
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.10
Linux Linux kernel=3.10.0
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.10
Linux Linux kernel=3.10.11
Linux Linux kernel=3.10.12
Linux Linux kernel=3.10.13
Linux Linux kernel=3.10.14
Linux Linux kernel=3.10.15
Linux Linux kernel=3.10.16
Linux Linux kernel=3.10.17
Linux Linux kernel=3.10.18
Linux Linux kernel=3.10.19
Linux Linux kernel=3.10.20
Linux Linux kernel=3.10.21
Linux Linux kernel=3.10.22
Linux Linux kernel=3.10.23
Linux Linux kernel=3.10.24
Linux Linux kernel=3.10.25
Linux Linux kernel=3.10.26
Linux Linux kernel=3.10.27
Linux Linux kernel=3.10.28
Linux Linux kernel=3.10.29
Linux Linux kernel=3.11
Linux Linux kernel=3.11.1
Linux Linux kernel=3.11.2
Linux Linux kernel=3.11.3
Linux Linux kernel=3.11.4
Linux Linux kernel=3.11.5
Linux Linux kernel=3.11.6
Linux Linux kernel=3.11.7
Linux Linux kernel=3.11.8
Linux Linux kernel=3.11.9
Linux Linux kernel=3.11.10
Linux Linux kernel=3.12
Linux Linux kernel=3.12.1
Linux Linux kernel=3.12.2
Linux Linux kernel=3.12.3
Linux Linux kernel=3.12.4
Linux Linux kernel=3.12.5
Linux Linux kernel=3.12.6
Linux Linux kernel=3.12.7
Linux Linux kernel=3.12.8
Linux Linux kernel=3.12.9
Linux Linux kernel=3.12.10
Linux Linux kernel=3.12.11
Linux Linux kernel=3.12.12
Linux Linux kernel=3.12.13
Linux Linux kernel=3.12.14
Linux Linux kernel=3.12.15
Linux Linux kernel=3.12.16
Linux Linux kernel=3.12.17
Linux Linux kernel=3.13
Linux Linux kernel=3.13.1
Linux Linux kernel=3.13.2
Linux Linux kernel=3.13.3
Linux Linux kernel=3.13.4
Linux Linux kernel=3.13.5
Linux Linux kernel=3.13.6
Linux Linux kernel=3.13.7
Linux Linux kernel=3.13.8
Linux Linux kernel=3.13.9
Linux Linux kernel=3.13.10
Linux Linux kernel=3.13.11
Linux Linux kernel=3.14
Linux Linux kernel=3.14-rc1
Linux Linux kernel=3.14-rc2
Linux Linux kernel=3.14-rc3
Linux Linux kernel=3.14-rc4
Linux Linux kernel=3.14-rc5
Linux Linux kernel=3.14-rc6
Linux Linux kernel=3.14-rc7
Linux Linux kernel=3.14-rc8
Linux Linux kernel=3.14.1
Linux Linux kernel=3.14.2
Linux Linux kernel=3.14.3
Linux Linux kernel=3.14.4
Linux Linux kernel=3.14.5
Linux Linux kernel=3.15
Linux Linux kernel=3.15.1
Linux Linux kernel=3.15.2
Linux Linux kernel=3.15.3
Linux Linux kernel=3.15.4
Linux Linux kernel=3.15.5
Linux Linux kernel=3.15.6
Linux Linux kernel=3.15.7
Linux Linux kernel=3.15.8
Linux Linux kernel=3.16.0
Linux Linux kernel=3.16.1
Linux Linux kernel=3.17
Linux Linux kernel=3.17.1
Linux Linux kernel=3.17.2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.27-1
Remediation
Event History
Oct 22, 2014
Data Sourced
via Red Hat·06:10 PM
DescriptionSeverityAffected Software
Nov 30, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:07 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:04 AM
RemedyDescriptionSeverityAffected Software
Apr 24, 2025
Data Sourced
via Debian·02:09 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3688?
CVE-2014-3688 is considered a denial-of-service vulnerability that can allow remote attackers to create memory pressure issues.
2
How do I fix CVE-2014-3688?
To fix CVE-2014-3688, update the Linux kernel to a version that addresses this vulnerability, such as 5.10.223-1 or later.
3
Which Linux kernel versions are affected by CVE-2014-3688?
CVE-2014-3688 affects Linux kernel versions up to and including 3.17.3.
4
What impact does CVE-2014-3688 have on systems?
CVE-2014-3688 can lead to denial-of-service conditions due to excessive queueing, causing the system to become unresponsive.
5
Is CVE-2014-3688 easily exploitable?
Yes, CVE-2014-3688 can be remotely triggered, making exploitation relatively straightforward for attackers.