Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-0639

Опубликовано: 17 янв. 2024
Источник: debian
EPSS Низкий

Описание

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed6.4.4-1package
linuxfixed6.1.52-1bookwormpackage
linuxfixed5.10.191-1bullseyepackage
linuxfixed4.19.304-1busterpackage

Примечания

  • https://git.kernel.org/linus/6feb37b3b06e9049e20dcf7e23998f92c9c5be9a (6.5-rc1)

EPSS

Процентиль: 0%
0.00007
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 1 года назад

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

CVSS3: 5.5
redhat
почти 2 года назад

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

CVSS3: 5.5
nvd
больше 1 года назад

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

CVSS3: 4.7
github
больше 1 года назад

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

CVSS3: 5.5
fstec
почти 2 года назад

Уязвимость функции sctp_auto_asconf_init (net/sctp/socket.c) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 0%
0.00007
Низкий
Уязвимость CVE-2024-0639