Deskripsi CVE

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Linux>>Linux_kernel >> Version Hingga (termasuk) 3.17.3

Linux>>Linux_kernel >> Version 3.0

Linux>>Linux_kernel >> Version 3.0.1

Linux>>Linux_kernel >> Version 3.0.2

Linux>>Linux_kernel >> Version 3.0.3

Linux>>Linux_kernel >> Version 3.0.4

Linux>>Linux_kernel >> Version 3.0.5

Linux>>Linux_kernel >> Version 3.0.6

Linux>>Linux_kernel >> Version 3.0.7

Linux>>Linux_kernel >> Version 3.0.8

Linux>>Linux_kernel >> Version 3.0.9

Linux>>Linux_kernel >> Version 3.0.10

Linux>>Linux_kernel >> Version 3.0.11

Linux>>Linux_kernel >> Version 3.0.12

Linux>>Linux_kernel >> Version 3.0.13

Linux>>Linux_kernel >> Version 3.0.14

Linux>>Linux_kernel >> Version 3.0.15

Linux>>Linux_kernel >> Version 3.0.16

Linux>>Linux_kernel >> Version 3.0.17

Linux>>Linux_kernel >> Version 3.0.18

Linux>>Linux_kernel >> Version 3.0.19

Linux>>Linux_kernel >> Version 3.0.20

Linux>>Linux_kernel >> Version 3.0.21

Linux>>Linux_kernel >> Version 3.0.22

Linux>>Linux_kernel >> Version 3.0.23

Linux>>Linux_kernel >> Version 3.0.24

Linux>>Linux_kernel >> Version 3.0.25

Linux>>Linux_kernel >> Version 3.0.26

Linux>>Linux_kernel >> Version 3.0.27

Linux>>Linux_kernel >> Version 3.0.28

Linux>>Linux_kernel >> Version 3.0.29

Linux>>Linux_kernel >> Version 3.0.30

Linux>>Linux_kernel >> Version 3.0.31

Linux>>Linux_kernel >> Version 3.0.32

Linux>>Linux_kernel >> Version 3.0.33

Linux>>Linux_kernel >> Version 3.0.34

Linux>>Linux_kernel >> Version 3.0.35

Linux>>Linux_kernel >> Version 3.0.36

Linux>>Linux_kernel >> Version 3.0.37

Linux>>Linux_kernel >> Version 3.0.38

Linux>>Linux_kernel >> Version 3.0.39

Linux>>Linux_kernel >> Version 3.0.40

Linux>>Linux_kernel >> Version 3.0.41

Linux>>Linux_kernel >> Version 3.0.42

Linux>>Linux_kernel >> Version 3.0.43

Linux>>Linux_kernel >> Version 3.0.44

Linux>>Linux_kernel >> Version 3.0.45

Linux>>Linux_kernel >> Version 3.0.46

Linux>>Linux_kernel >> Version 3.0.47

Linux>>Linux_kernel >> Version 3.0.48

Linux>>Linux_kernel >> Version 3.0.49

Linux>>Linux_kernel >> Version 3.0.50

Linux>>Linux_kernel >> Version 3.0.51

Linux>>Linux_kernel >> Version 3.0.52

Linux>>Linux_kernel >> Version 3.0.53

Linux>>Linux_kernel >> Version 3.0.54

Linux>>Linux_kernel >> Version 3.0.55

Linux>>Linux_kernel >> Version 3.0.56

Linux>>Linux_kernel >> Version 3.0.57

Linux>>Linux_kernel >> Version 3.0.58

Linux>>Linux_kernel >> Version 3.0.59

Linux>>Linux_kernel >> Version 3.0.60

Linux>>Linux_kernel >> Version 3.0.61

Linux>>Linux_kernel >> Version 3.0.62

Linux>>Linux_kernel >> Version 3.0.63

Linux>>Linux_kernel >> Version 3.0.64

Linux>>Linux_kernel >> Version 3.0.65

Linux>>Linux_kernel >> Version 3.0.66

Linux>>Linux_kernel >> Version 3.0.67

Linux>>Linux_kernel >> Version 3.0.68

Linux>>Linux_kernel >> Version 3.1

Linux>>Linux_kernel >> Version 3.1.1

Linux>>Linux_kernel >> Version 3.1.2

Linux>>Linux_kernel >> Version 3.1.3

Linux>>Linux_kernel >> Version 3.1.4

Linux>>Linux_kernel >> Version 3.1.5

Linux>>Linux_kernel >> Version 3.1.6

Linux>>Linux_kernel >> Version 3.1.7

Linux>>Linux_kernel >> Version 3.1.8

Linux>>Linux_kernel >> Version 3.1.9

Linux>>Linux_kernel >> Version 3.1.10

Linux>>Linux_kernel >> Version 3.2

Linux>>Linux_kernel >> Version 3.10

Linux>>Linux_kernel >> Version 3.10.0

Linux>>Linux_kernel >> Version 3.10.1

Linux>>Linux_kernel >> Version 3.10.2

Linux>>Linux_kernel >> Version 3.10.3

Linux>>Linux_kernel >> Version 3.10.4

Linux>>Linux_kernel >> Version 3.10.5

Linux>>Linux_kernel >> Version 3.10.6

Linux>>Linux_kernel >> Version 3.10.7

Linux>>Linux_kernel >> Version 3.10.8

Linux>>Linux_kernel >> Version 3.10.9

Linux>>Linux_kernel >> Version 3.10.10

Linux>>Linux_kernel >> Version 3.10.11

Linux>>Linux_kernel >> Version 3.10.12

Linux>>Linux_kernel >> Version 3.10.13

Linux>>Linux_kernel >> Version 3.10.14

Linux>>Linux_kernel >> Version 3.10.15

Linux>>Linux_kernel >> Version 3.10.16

Linux>>Linux_kernel >> Version 3.10.17

Linux>>Linux_kernel >> Version 3.10.18

Linux>>Linux_kernel >> Version 3.10.19

Linux>>Linux_kernel >> Version 3.10.20

Linux>>Linux_kernel >> Version 3.10.21

Linux>>Linux_kernel >> Version 3.10.22

Linux>>Linux_kernel >> Version 3.10.23

Linux>>Linux_kernel >> Version 3.10.24

Linux>>Linux_kernel >> Version 3.10.25

Linux>>Linux_kernel >> Version 3.10.26

Linux>>Linux_kernel >> Version 3.10.27

Linux>>Linux_kernel >> Version 3.10.28

Linux>>Linux_kernel >> Version 3.10.29

Linux>>Linux_kernel >> Version 3.11

Linux>>Linux_kernel >> Version 3.11.1

Linux>>Linux_kernel >> Version 3.11.2

Linux>>Linux_kernel >> Version 3.11.3

Linux>>Linux_kernel >> Version 3.11.4

Linux>>Linux_kernel >> Version 3.11.5

Linux>>Linux_kernel >> Version 3.11.6

Linux>>Linux_kernel >> Version 3.11.7

Linux>>Linux_kernel >> Version 3.11.8

Linux>>Linux_kernel >> Version 3.11.9

Linux>>Linux_kernel >> Version 3.11.10

Linux>>Linux_kernel >> Version 3.12

Linux>>Linux_kernel >> Version 3.12.1

Linux>>Linux_kernel >> Version 3.12.2

Linux>>Linux_kernel >> Version 3.12.3

Linux>>Linux_kernel >> Version 3.12.4

Linux>>Linux_kernel >> Version 3.12.5

Linux>>Linux_kernel >> Version 3.12.6

Linux>>Linux_kernel >> Version 3.12.7

Linux>>Linux_kernel >> Version 3.12.8

Linux>>Linux_kernel >> Version 3.12.9

Linux>>Linux_kernel >> Version 3.12.10

Linux>>Linux_kernel >> Version 3.12.11

Linux>>Linux_kernel >> Version 3.12.12

Linux>>Linux_kernel >> Version 3.12.13

Linux>>Linux_kernel >> Version 3.12.14

Linux>>Linux_kernel >> Version 3.12.15

Linux>>Linux_kernel >> Version 3.12.16

Linux>>Linux_kernel >> Version 3.12.17

Linux>>Linux_kernel >> Version 3.13

Linux>>Linux_kernel >> Version 3.13.1

Linux>>Linux_kernel >> Version 3.13.2

Linux>>Linux_kernel >> Version 3.13.3

Linux>>Linux_kernel >> Version 3.13.4

Linux>>Linux_kernel >> Version 3.13.5

Linux>>Linux_kernel >> Version 3.13.6

Linux>>Linux_kernel >> Version 3.13.7

Linux>>Linux_kernel >> Version 3.13.8

Linux>>Linux_kernel >> Version 3.13.9

Linux>>Linux_kernel >> Version 3.13.10

Linux>>Linux_kernel >> Version 3.13.11

Linux>>Linux_kernel >> Version 3.14

Linux>>Linux_kernel >> Version 3.14.1

Linux>>Linux_kernel >> Version 3.14.2

Linux>>Linux_kernel >> Version 3.14.3

Linux>>Linux_kernel >> Version 3.14.4

Linux>>Linux_kernel >> Version 3.14.5

Linux>>Linux_kernel >> Version 3.15

Linux>>Linux_kernel >> Version 3.15.1

Linux>>Linux_kernel >> Version 3.15.2

Linux>>Linux_kernel >> Version 3.15.3

Linux>>Linux_kernel >> Version 3.15.4

Linux>>Linux_kernel >> Version 3.15.5

Linux>>Linux_kernel >> Version 3.15.6

Linux>>Linux_kernel >> Version 3.15.7

Linux>>Linux_kernel >> Version 3.15.8

Linux>>Linux_kernel >> Version 3.16.0

Linux>>Linux_kernel >> Version 3.16.1

Linux>>Linux_kernel >> Version 3.17

Linux>>Linux_kernel >> Version 3.17.1

Linux>>Linux_kernel >> Version 3.17.2

Referensi

http://www.openwall.com/lists/oss-security/2014/11/13/8
Tags : mailing-list, x_refsource_MLIST

http://marc.info/?l=bugtraq&m=142722450701342&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.ubuntu.com/usn/USN-2418-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html
Tags : vendor-advisory, x_refsource_SUSE

http://rhn.redhat.com/errata/RHSA-2015-0062.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/USN-2417-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://marc.info/?l=bugtraq&m=142722544401658&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.debian.org/security/2014/dsa-3060
Tags : vendor-advisory, x_refsource_DEBIAN

https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4
Tags : x_refsource_CONFIRM

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26b87c7881006311828bb0ab271a551a62dcceb4
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Tags : vendor-advisory, x_refsource_SUSE

https://bugzilla.redhat.com/show_bug.cgi?id=1155745
Tags : x_refsource_CONFIRM

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2015-0115.html
Tags : vendor-advisory, x_refsource_REDHAT

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.78%	–	–
2022-02-20	–	–	3.78%	–	–
2022-04-03	–	–	3.78%	–	–
2022-07-17	–	–	3.78%	–	–
2023-02-05	–	–	4.36%	–	–
2023-02-19	–	–	3.78%	–	–
2023-03-12	–	–	–	37.62%	–
2024-06-02	–	–	–	35.98%	–
2024-07-14	–	–	–	20.62%	–
2024-11-10	–	–	–	20.62%	–
2024-12-22	–	–	–	20.62%	–
2025-01-19	–	–	–	20.62%	–
2025-03-18	–	–	–	–	1.45%
2025-03-30	–	–	–	–	1.95%
2025-05-02	–	–	–	–	1.95%
2025-05-04	–	–	–	–	1.95%
2025-05-18	–	–	–	–	1.95%
2025-06-12	–	–	–	–	2.62%
2025-08-02	–	–	–	–	2.24%
2025-11-18	–	–	–	–	2.24%
2025-11-21	–	–	–	–	2.24%
2026-02-22	–	–	–	–	2.62%
2026-03-22	–	–	–	–	2.62%
2026-04-26	–	–	–	–	1.96%

Tanggal	Persentil
2022-02-06	67%
2022-02-20	68%
2022-04-03	84%
2022-07-17	85%
2023-02-05	88%
2023-02-19	85%
2023-03-12	97%
2024-06-02	97%
2024-07-14	96%
2024-11-10	97%
2024-12-22	96%
2025-01-19	96%
2025-03-18	79%
2025-03-30	82%
2025-05-02	83%
2025-05-04	82%
2025-05-18	83%
2025-06-12	85%
2025-08-02	84%
2025-11-18	83%
2025-11-21	84%
2026-02-22	85%
2026-03-22	86%
2026-04-26	84%

CVE-2014-3688 : Detail

CVE-2014-3688