NVD

Id
26481  
Name
CVE-2015-5283  
Description
The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-10-19  
Modified Date
2016-12-07  
Seq
2015-5283  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140013 26481 CVE-2015-5283 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4  View
140014 26481 CVE-2015-5283 SUSE-SU-2015:1727  View
140015 26481 CVE-2015-5283 SUSE-SU-2015:2194  View
140016 26481 CVE-2015-5283 http://patchwork.ozlabs.org/patch/515996/  View
140017 26481 CVE-2015-5283 DSA-3372  View
140018 26481 CVE-2015-5283 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3  View
140019 26481 CVE-2015-5283 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140020 26481 CVE-2015-5283 77058  View
140021 26481 CVE-2015-5283 1033808  View
140022 26481 CVE-2015-5283 USN-2823-1  View
140023 26481 CVE-2015-5283 USN-2826-1  View
140024 26481 CVE-2015-5283 USN-2829-1  View
140025 26481 CVE-2015-5283 USN-2829-2  View
140026 26481 CVE-2015-5283 https://bugzilla.redhat.com/show_bug.cgi?id=1257528  View
140027 26481 CVE-2015-5283 https://github.com/torvalds/linux/commit/8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4  View
140028 26481 CVE-2015-5283 https://security-tracker.debian.org/tracker/CVE-2015-5283  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10051 JVNDB-2015-005371 Linux Kernel の net/sctp/protocol.c の sctp_init 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/sctp/protocol.c の sctp_init 関数は、プロトコル初期化のステップに不正なシーケンスを持つため、サービス運用妨害 (パニックまたはメモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-5283 82508 CVE-2015-5283 26481 4.7 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005371.html 2015-10-03 2015-10-20 View