NVD

Id
23745  
Name
CVE-2015-1421  
Description
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-03-16  
Modified Date
2017-01-02  
Seq
2015-1421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126240 23745 CVE-2015-1421 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=600ddd6825543962fb807884169e57b580dba208  View
126241 23745 CVE-2015-1421 SUSE-SU-2015:0832  View
126242 23745 CVE-2015-1421 SUSE-SU-2015:1478  View
126243 23745 CVE-2015-1421 RHSA-2015:0726  View
126244 23745 CVE-2015-1421 RHSA-2015:0751  View
126245 23745 CVE-2015-1421 RHSA-2015:0782  View
126246 23745 CVE-2015-1421 DSA-3170  View
126247 23745 CVE-2015-1421 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8  View
126248 23745 CVE-2015-1421 [oss-security] 20150129 Re: CVE request -- Linux kernel - net: sctp: slab corruption from use after free on INIT collisions  View
126249 23745 CVE-2015-1421 72356  View
126250 23745 CVE-2015-1421 1032172  View
126251 23745 CVE-2015-1421 USN-2541-1  View
126252 23745 CVE-2015-1421 USN-2542-1  View
126253 23745 CVE-2015-1421 USN-2545-1  View
126254 23745 CVE-2015-1421 USN-2546-1  View
126255 23745 CVE-2015-1421 USN-2562-1  View
126256 23745 CVE-2015-1421 USN-2563-1  View
126257 23745 CVE-2015-1421 https://bugzilla.redhat.com/show_bug.cgi?id=1196581  View
126258 23745 CVE-2015-1421 https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6517 JVNDB-2015-001837 Linux Kernel の net/sctp/associola.c の sctp_assoc_update 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/sctp/associola.c の sctp_assoc_update 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (スラブ (slab) 破損およびパニック) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-1421 78646 CVE-2015-1421 23745 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001837.html 2015-01-27 2015-05-25 View