Red Hat Security Advisory

RHSA-2015:0115

kernel security update

Released 2015-02-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.58.1.el6, kernel-debug-2.6.32-220.58.1.el6, kernel-debug-devel-2.6.32-220.58.1.el6 +5
Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.58.1.el6, python-perf-2.6.32-220.58.1.el6

Fixes 3 records

TI-2014-03003 CVE-2014-3687 · GHSA-g3cq-4g9m-v985

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP…

MEDIUM 44

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks tha…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08579 Published 2014-11-10 Partial fix CWE-400

TI-2014-02990 CVE-2014-3673 · GHSA-g35v-9m6f-v2fq

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…

MEDIUM 43

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07461 Published 2014-11-10 Partial fix CWE-20

TI-2014-03004 CVE-2014-3688 · GHSA-v2ph-65j5-h6m5

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to…

LOW 32

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0585 Published 2014-11-30 Partial fix CWE-399