CVE-2014-7841: Null Pointer Dereference

Q: What vulnerabilities are associated with CVE-2014-7841?

CVE-2014-7841 allows a remote attacker to crash an SCTP server via a malformed INIT ping-of-death packet.

Q: What systems are affected by CVE-2014-7841?

CVE-2014-7841 affects various versions of the Linux kernel, specifically those prior to 3.17.4.

Q: How do I mitigate CVE-2014-7841?

To mitigate CVE-2014-7841, update your Linux kernel to a patched version such as 5.10.223-1 or later.

Q: What is the potential impact of CVE-2014-7841?

The potential impact of CVE-2014-7841 includes a denial of service condition due to a kernel panic.

Q: How do I identify if my system is vulnerable to CVE-2014-7841?

You can identify vulnerability to CVE-2014-7841 by checking if your Linux kernel version is below 3.17.4.

Published Nov 12, 2014

Updated

An SCTP server doing ASCONF will panic on malformed INIT ping-of-death in the form of:

------------ INIT[PARAM: SETPRIMARYIP] ------------>

A remote attacker could use this flaw to crash the system by sending a maliciously prepared SCTP packet in order to trigger a NULL pointer dereference on the server.

Upstream patch:

https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=e40607cbe270a9e8360907cb1e62ddf0736e4864

Acknowledgements:

This issue was discovered by Liu Wei of Red Hat.

Other sources

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.

— Launchpad

Affected Software

205 affected componentsFixes available

Linux Linux kernel<=3.17.3

Linux Linux kernel=3.0-rc1

Linux Linux kernel=3.0-rc2

Linux Linux kernel=3.0-rc3

Linux Linux kernel=3.0-rc4

Linux Linux kernel=3.0-rc5

Linux Linux kernel=3.0-rc6

Linux Linux kernel=3.0-rc7

Linux Linux kernel=3.0.1

Linux Linux kernel=3.0.2

Linux Linux kernel=3.0.3

Linux Linux kernel=3.0.4

Linux Linux kernel=3.0.5

Linux Linux kernel=3.0.6

Linux Linux kernel=3.0.7

Linux Linux kernel=3.0.8

Linux Linux kernel=3.0.9

Linux Linux kernel=3.0.10

Linux Linux kernel=3.0.11

Linux Linux kernel=3.0.12

Linux Linux kernel=3.0.13

Linux Linux kernel=3.0.14

Linux Linux kernel=3.0.15

Linux Linux kernel=3.0.16

Linux Linux kernel=3.0.17

Linux Linux kernel=3.0.18

Linux Linux kernel=3.0.19

Linux Linux kernel=3.0.20

Linux Linux kernel=3.0.21

Linux Linux kernel=3.0.22

Linux Linux kernel=3.0.23

Linux Linux kernel=3.0.24

Linux Linux kernel=3.0.25

Linux Linux kernel=3.0.26

Linux Linux kernel=3.0.27

Linux Linux kernel=3.0.28

Linux Linux kernel=3.0.29

Linux Linux kernel=3.0.30

Linux Linux kernel=3.0.31

Linux Linux kernel=3.0.32

Linux Linux kernel=3.0.33

Linux Linux kernel=3.0.34

Linux Linux kernel=3.0.35

Linux Linux kernel=3.0.36

Linux Linux kernel=3.0.37

Linux Linux kernel=3.0.38

Linux Linux kernel=3.0.39

Linux Linux kernel=3.0.40

Linux Linux kernel=3.0.41

Linux Linux kernel=3.0.42

Linux Linux kernel=3.0.43

Linux Linux kernel=3.0.44

Linux Linux kernel=3.0.45

Linux Linux kernel=3.0.46

Linux Linux kernel=3.0.47

Linux Linux kernel=3.0.48

Linux Linux kernel=3.0.49

Linux Linux kernel=3.0.50

Linux Linux kernel=3.0.51

Linux Linux kernel=3.0.52

Linux Linux kernel=3.0.53

Linux Linux kernel=3.0.54

Linux Linux kernel=3.0.55

Linux Linux kernel=3.0.56

Linux Linux kernel=3.0.57

Linux Linux kernel=3.0.58

Linux Linux kernel=3.0.59

Linux Linux kernel=3.0.60

Linux Linux kernel=3.0.61

Linux Linux kernel=3.0.62

Linux Linux kernel=3.0.63

Linux Linux kernel=3.0.64

Linux Linux kernel=3.0.65

Linux Linux kernel=3.0.66

Linux Linux kernel=3.0.67

Linux Linux kernel=3.0.68

Linux Linux kernel=3.1

Linux Linux kernel=3.1-rc1

Linux Linux kernel=3.1-rc2

Linux Linux kernel=3.1-rc3

Linux Linux kernel=3.1-rc4

Linux Linux kernel=3.1.1

Linux Linux kernel=3.1.2

Linux Linux kernel=3.1.3

Linux Linux kernel=3.1.4

Linux Linux kernel=3.1.5

Linux Linux kernel=3.1.6

Linux Linux kernel=3.1.7

Linux Linux kernel=3.1.8

Linux Linux kernel=3.1.9

Linux Linux kernel=3.1.10

Linux Linux kernel=3.2

Linux Linux kernel=3.2-rc2

Linux Linux kernel=3.2-rc3

Linux Linux kernel=3.10

Linux Linux kernel=3.10.0

Linux Linux kernel=3.10.1

Linux Linux kernel=3.10.2

Linux Linux kernel=3.10.3

Linux Linux kernel=3.10.4

Linux Linux kernel=3.10.5

Linux Linux kernel=3.10.6

Linux Linux kernel=3.10.7

Linux Linux kernel=3.10.8

Linux Linux kernel=3.10.9

Linux Linux kernel=3.10.10

Linux Linux kernel=3.10.11

Linux Linux kernel=3.10.12

Linux Linux kernel=3.10.13

Linux Linux kernel=3.10.14

Linux Linux kernel=3.10.15

Linux Linux kernel=3.10.16

Linux Linux kernel=3.10.17

Linux Linux kernel=3.10.18

Linux Linux kernel=3.10.19

Linux Linux kernel=3.10.20

Linux Linux kernel=3.10.21

Linux Linux kernel=3.10.22

Linux Linux kernel=3.10.23

Linux Linux kernel=3.10.24

Linux Linux kernel=3.10.25

Linux Linux kernel=3.10.26

Linux Linux kernel=3.10.27

Linux Linux kernel=3.10.28

Linux Linux kernel=3.10.29

Linux Linux kernel=3.11

Linux Linux kernel=3.11.1

Linux Linux kernel=3.11.2

Linux Linux kernel=3.11.3

Linux Linux kernel=3.11.4

Linux Linux kernel=3.11.5

Linux Linux kernel=3.11.6

Linux Linux kernel=3.11.7

Linux Linux kernel=3.11.8

Linux Linux kernel=3.11.9

Linux Linux kernel=3.11.10

Linux Linux kernel=3.12

Linux Linux kernel=3.12.1

Linux Linux kernel=3.12.2

Linux Linux kernel=3.12.3

Linux Linux kernel=3.12.4

Linux Linux kernel=3.12.5

Linux Linux kernel=3.12.6

Linux Linux kernel=3.12.7

Linux Linux kernel=3.12.8

Linux Linux kernel=3.12.9

Linux Linux kernel=3.12.10

Linux Linux kernel=3.12.11

Linux Linux kernel=3.12.12

Linux Linux kernel=3.12.13

Linux Linux kernel=3.12.14

Linux Linux kernel=3.12.15

Linux Linux kernel=3.12.16

Linux Linux kernel=3.12.17

Linux Linux kernel=3.13

Linux Linux kernel=3.13.1

Linux Linux kernel=3.13.2

Linux Linux kernel=3.13.3

Linux Linux kernel=3.13.4

Linux Linux kernel=3.13.5

Linux Linux kernel=3.13.6

Linux Linux kernel=3.13.7

Linux Linux kernel=3.13.8

Linux Linux kernel=3.13.9

Linux Linux kernel=3.13.10

Linux Linux kernel=3.13.11

Linux Linux kernel=3.14

Linux Linux kernel=3.14-rc1

Linux Linux kernel=3.14-rc2

Linux Linux kernel=3.14-rc3

Linux Linux kernel=3.14-rc4

Linux Linux kernel=3.14-rc5

Linux Linux kernel=3.14-rc6

Linux Linux kernel=3.14-rc7

Linux Linux kernel=3.14-rc8

Linux Linux kernel=3.14.1

Linux Linux kernel=3.14.2

Linux Linux kernel=3.14.3

Linux Linux kernel=3.14.4

Linux Linux kernel=3.14.5

Linux Linux kernel=3.15

Linux Linux kernel=3.15.1

Linux Linux kernel=3.15.2

Linux Linux kernel=3.15.3

Linux Linux kernel=3.15.4

Linux Linux kernel=3.15.5

Linux Linux kernel=3.15.6

Linux Linux kernel=3.15.7

Linux Linux kernel=3.15.8

Linux Linux kernel=3.16.0

Linux Linux kernel=3.16.1

Linux Linux kernel=3.17

Linux Linux kernel=3.17.1

Linux Linux kernel=3.17.2

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1

Remediation

Patch Available

https://git.kernel.org/linus/d6de3097592b7ae7f8e233a4dafb088e2aa8170f

Patch Available

https://git.kernel.org/linus/e40607cbe270a9e8360907cb1e62ddf0736e4864

Event History

Nov 12, 2014

Data Sourced

via Red Hat·11:08 AM

DescriptionSeverityAffected Software

Nov 30, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Jan 11, 2024

Data Sourced

via Launchpad·10:07 PM

Description

Sep 20, 2024

Data Sourced

via Ubuntu·01:05 AM

RemedyDescriptionSeverityAffected Software

Apr 24, 2025

Data Sourced

via Debian·02:09 AM

DescriptionAffected Software

Frequently Asked Questions

What vulnerabilities are associated with CVE-2014-7841?

CVE-2014-7841 allows a remote attacker to crash an SCTP server via a malformed INIT ping-of-death packet.

What systems are affected by CVE-2014-7841?

CVE-2014-7841 affects various versions of the Linux kernel, specifically those prior to 3.17.4.

How do I mitigate CVE-2014-7841?

To mitigate CVE-2014-7841, update your Linux kernel to a patched version such as 5.10.223-1 or later.

What is the potential impact of CVE-2014-7841?

The potential impact of CVE-2014-7841 includes a denial of service condition due to a kernel panic.

How do I identify if my system is vulnerable to CVE-2014-7841?

You can identify vulnerability to CVE-2014-7841 by checking if your Linux kernel version is below 3.17.4.

CVE-2014-7841: Null Pointer Dereference

Other sources

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What vulnerabilities are associated with CVE-2014-7841?

What systems are affected by CVE-2014-7841?

How do I mitigate CVE-2014-7841?

What is the potential impact of CVE-2014-7841?

How do I identify if my system is vulnerable to CVE-2014-7841?

Company

Resources

Contact