CVE-2014-3673

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux kernel versions 2.6.32 Linux kernel versions prior to 3.17.2

Description The issue affects the Linux kernel and Red Hat Enterprise Linux, allowing remote attackers to cause a denial of service or disrupt the confidentiality, integrity, and availability of protected information. The exploitation can be done remotely. The SCTP implementation in the Linux kernel is specifically vulnerable to a denial of service attack via a malformed ASCONF chunk.

Recommendations For Red Hat Enterprise Linux kernel version 2.6.32, update to a version that includes the necessary security patches. For Linux kernel versions prior to 3.17.2, update to version 3.17.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the SCTP implementation until a patch is available.