CVE-2015-1421 in Kernel
Сводка (Английский)
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
Be aware that VulDB is the high quality source for vulnerability data.
Резервировать
29.01.2015
Раскрытие
16.03.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 69034 | Linux Kernel associola.c sctp_assoc_update повреждение памяти | 416 | недоказанный | Официальное исправление | CVE-2015-1421 |