NVD

Id
29036  
Name
CVE-2014-0101  
Description
The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-03-11  
Modified Date
2017-01-06  
Seq
2014-0101  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153313 29036 CVE-2014-0101 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ec0223ec48a90cb605244b45f7c62de856403729  View
153314 29036 CVE-2014-0101 RHSA-2014:0328  View
153315 29036 CVE-2014-0101 59216  View
153316 29036 CVE-2014-0101 http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15317.html  View
153317 29036 CVE-2014-0101 [oss-security] 20140304 CVE-2014-0101 -- Linux kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk  View
153318 29036 CVE-2014-0101 65943  View
153319 29036 CVE-2014-0101 https://bugzilla.redhat.com/show_bug.cgi?id=1070705  View
153320 29036 CVE-2014-0101 https://github.com/torvalds/linux/commit/ec0223ec48a90cb605244b45f7c62de856403729  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12733 JVNDB-2014-001608 Linux Kernel の net/sctp/sm_statefuns.c 内の sctp_sf_do_5_1D_ce 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/sctp/sm_statefuns.c 内の sctp_sf_do_5_1D_ce 関数は、sctp_sf_authenticate を呼び出す前に、特定の auth_enable および auth_capable フィールドを検証しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-0101 67502 CVE-2014-0101 29036 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001608.html 2014-03-03 2014-04-08 View