Red Hat Security AdvisoryRHSA-2015:0043
kernel security and bug fix update
Released 2015-01-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.55.1.el6, python-perf-2.6.32-358.55.1.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.55.1.el6, kernel-debug-2.6.32-358.55.1.el6, kernel-debug-devel-2.6.32-358.55.1.el6 +5
- Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.55.1.el6, kernel-bootwrapper-2.6.32-358.55.1.el6, kernel-debug-2.6.32-358.55.1.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.55.1.el6, python-perf-2.6.32-358.55.1.el6
Fixes 3 records
Priority MEDIUM 44
The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks tha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08579 · Published 2014-11-10 · Partial fix CWE-400
Priority MEDIUM 43
The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07461 · Published 2014-11-10 · Partial fix CWE-20
Priority LOW 32
The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0585 · Published 2014-11-30 · Partial fix CWE-399
THREATIST.IORead the docs