CVE-2015-5283 in Linux Kernel
Summary
The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.
Reservation
07/01/2015
Disclosure
10/19/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 78509 | Linux Kernel SCTP Socket protocol.c sctp_init memory corruption | 119 | Not defined | Official fix | CVE-2015-5283 |