CVE-2014-4667

CVE Details

Release Date:2014-06-12

Description


An integer underflow flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation processed certain COOKIE_ECHO packets. By sending a specially crafted SCTP packet, a remote attacker could use this flaw to prevent legitimate connections to a particular SCTP server socket to be made.

See more information about CVE-2014-4667 from MITRE CVE dictionary and NIST NVD


CVSS v2.0 metrics


NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score: 5 Base Metrics: AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector: Network Attack Complexity: Low
Authentication: None required Confidentiality Impact: None
Integrity Impact: None Availability Impact: Partial

Errata information


PlatformErrataRelease Date
Oracle Linux version 5 (kernel-uek)ELSA-2014-30682014-08-11
Oracle Linux version 5 (kernel-uek)ELSA-2014-30692014-08-11
Oracle Linux version 5 (mlnx_en-2.6.32-400.36.7.el5uek)ELSA-2014-30692014-08-11
Oracle Linux version 5 (ofa-2.6.32-400.36.7.el5uek)ELSA-2014-30692014-08-11
Oracle Linux version 6 (dtrace-modules-3.8.13-35.3.5.el6uek)ELSA-2014-30672014-08-11
Oracle Linux version 6 (kernel)ELSA-2014-11672014-09-09
Oracle Linux version 6 (kernel-uek)ELSA-2014-30672014-08-11
Oracle Linux version 6 (kernel-uek)ELSA-2014-30682014-08-11
Oracle Linux version 6 (kernel-uek)ELSA-2014-30692014-08-11
Oracle Linux version 6 (mlnx_en-2.6.32-400.36.7.el6uek)ELSA-2014-30692014-08-11
Oracle Linux version 6 (ofa-2.6.32-400.36.7.el6uek)ELSA-2014-30692014-08-11
Oracle Linux version 7 (dtrace-modules-3.8.13-35.3.5.el7uek)ELSA-2014-30672014-08-11
Oracle Linux version 7 (kernel)ELSA-2014-10232014-08-06
Oracle Linux version 7 (kernel-uek)ELSA-2014-30672014-08-11



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete