Read the docs
TI-2014-00096 Aliases CVE-2014-0101GHSA-gcjx-xxq3-676c

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through…

Priority MEDIUM 44CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
Partial Red Hat: 18 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

Why it matters now

EPSS 0.07179 94th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 18 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 30

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*2.6.24 to before 3.2.56; 3.3 to before 3.4.84; 3.5 to before 3.10.34; 3.11 to before 3.12.15; 3.13 to before 3.13.7VulnerableLinux
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*6.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 2.6.24 to before 3.2.56; 3.3 to before 3.4.84; 3.5 to before 3.10.34; 3.11 to before 3.12.15; 3.13 to before 3.13.7 Vulnerable ·Linux
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 20 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*10.04VulnerableCanonical
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*11.3.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*11.4.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*11.1.0 – 11.3.0VulnerableF5
cpe:2.3:a:f5:big-ip_enterprise_manager:*:*:*:*:*:*:*:*2.1.0 – 2.3.0; 3.0.0 – 3.1.1VulnerableF5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*11.1.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*11.3.0 – 11.5.3VulnerableF5
cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*11.1.0 – 11.4.1VulnerableF5
cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*11.1.0 – 11.3.0VulnerableF5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*11.1.0 – 11.3.0VulnerableF5
cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:*4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*4.6.0VulnerableF5
cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*4.0.0 – 4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*4.2.0 – 4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*4.0.0 – 4.5.0VulnerableF5
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* Versions 10.04 Vulnerable ·Canonical
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.3.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_enterprise_manager:*:*:*:*:*:*:*:* Versions 2.1.0 – 2.3.0; 3.0.0 – 3.1.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.3.0 – 11.5.3 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.4.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:* Versions 4.6.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:* Versions 4.2.0 – 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5

Remediation

Red Hat 4 advisories

  • RHSA-2014:0520 Released 2014-05-20 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, kernel-debug-2.6.32-220.51.1.el6, kernel-debug-devel-2.6.32-220.51.1.el6 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, python-perf-2.6.32-220.51.1.el6
  • RHSA-2014:0432 Released 2014-04-24 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, python-perf-2.6.32-358.41.1.el6
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, kernel-debug-2.6.32-358.41.1.el6, kernel-debug-devel-2.6.32-358.41.1.el6 +5
    • Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, kernel-bootwrapper-2.6.32-358.41.1.el6, kernel-debug-2.6.32-358.41.1.el6 +8
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, python-perf-2.6.32-358.41.1.el6
  • RHSA-2014:0419 Released 2014-04-22 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Compute Node EUS (v. 6.3) kernel-2.6.32-279.43.1.el6, kernel-debug-2.6.32-279.43.1.el6, kernel-debug-devel-2.6.32-279.43.1.el6 +5
    • Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) kernel-2.6.32-279.43.1.el6, python-perf-2.6.32-279.43.1.el6
    • Red Hat Enterprise Linux Server EUS (v. 6.3) kernel-2.6.32-279.43.1.el6, kernel-bootwrapper-2.6.32-279.43.1.el6, kernel-debug-2.6.32-279.43.1.el6 +8
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.3) kernel-2.6.32-279.43.1.el6, python-perf-2.6.32-279.43.1.el6
Show 1 more Red Hat advisories
  • RHSA-2014:0328 Released 2014-03-25 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
    • Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-bootwrapper-2.6.32-431.11.2.el6 +9
    • Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
    • Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise MRG 2AffectedNo fix yet
Red Hat Enterprise Linux Compute Node EUS (v. 6.3)Fixed RHSA-2014:0419
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3)Fixed RHSA-2014:0419
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)Fixed RHSA-2014:0432
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux HPC Node EUS (v. 6.4)Fixed RHSA-2014:0432
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux Server AUS (v. 6.2)Fixed RHSA-2014:0520
Red Hat Enterprise Linux Server EUS (v. 6.3)Fixed RHSA-2014:0419
Red Hat Enterprise Linux Server EUS (v. 6.4)Fixed RHSA-2014:0432
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux Server Optional AUS (v. 6.2)Fixed RHSA-2014:0520
Red Hat Enterprise Linux Server Optional EUS (v. 6.3)Fixed RHSA-2014:0419
Red Hat Enterprise Linux Server Optional EUS (v. 6.4)Fixed RHSA-2014:0432
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2014:0328
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2014:0328
Not affected: 2 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0101
  2. 2026-10-03 Alias added: GHSA-gcjx-xxq3-676c

References

Patch 3

Advisory 6

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences