ID de Prueba:	1.3.6.1.4.1.25623.1.0.105161
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - Linux kernel SCTP vulnerabilities CVE-2014-3673 and CVE-2014-3687
Resumen:	F5 BIG-IP is prone to a remote denial-of-service vulnerability.
Descripción:	Summary: F5 BIG-IP is prone to a remote denial-of-service vulnerability. Vulnerability Insight: CVE-2014-3673 The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c. CVE-2014-3687 The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter. Vulnerability Impact: Remote attackers may be able to cause a denial-of-service (DoS) using malformed or duplicate ASCONF chunk. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	BugTraq ID: 70883 BugTraq ID: 70766 Common Vulnerability Exposure (CVE) ID: CVE-2014-3687 http://www.securityfocus.com/bid/70766 Debian Security Information: DSA-3060 (Google Search) http://www.debian.org/security/2014/dsa-3060 HPdes Security Advisory: HPSBGN03282 http://marc.info/?l=bugtraq&m=142722544401658&w=2 HPdes Security Advisory: HPSBGN03285 http://marc.info/?l=bugtraq&m=142722450701342&w=2 RedHat Security Advisories: RHSA-2015:0062 http://rhn.redhat.com/errata/RHSA-2015-0062.html RedHat Security Advisories: RHSA-2015:0115 http://rhn.redhat.com/errata/RHSA-2015-0115.html http://secunia.com/advisories/62428 SuSE Security Announcement: SUSE-SU-2015:0178 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html SuSE Security Announcement: SUSE-SU-2015:0481 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SuSE Security Announcement: SUSE-SU-2015:0529 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html SuSE Security Announcement: SUSE-SU-2015:0652 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html SuSE Security Announcement: SUSE-SU-2015:0736 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html SuSE Security Announcement: SUSE-SU-2015:1489 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html SuSE Security Announcement: openSUSE-SU-2015:0566 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://www.ubuntu.com/usn/USN-2417-1 http://www.ubuntu.com/usn/USN-2418-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-3673 http://www.securityfocus.com/bid/70883 SuSE Security Announcement: SUSE-SU-2015:0812 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.