CVE-2021-3772

kernel: sctp: Invalid chunks may be used to remotely remove existing associations

Published Mar 2, 2022 CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Description
A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2941-1 linux-4.19 security update
Debian DSA Debian DSA DSA-5096-1 linux security update
EUVD EUVD EUVD-2021-27041 A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Ubuntu USN Ubuntu USN USN-5165-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5265-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5466-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5467-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6001-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6013-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6014-1 Linux kernel vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00161}

epss

{'score': 0.00148}