CVE ID:	CVE-2014-7841
Description:	The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.
Test IDs:	1.3.6.1.4.1.25623.1.0.703093   1.3.6.1.4.1.25623.1.0.871309   1.3.6.1.4.1.25623.1.0.882110   1.3.6.1.4.1.25623.1.0.882114   1.3.6.1.4.1.25623.1.0.871306   1.3.6.1.4.1.25623.1.0.123191   1.3.6.1.4.1.25623.1.0.123190
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7841 BugTraq ID: 71081 http://www.securityfocus.com/bid/71081 Debian Security Information: DSA-3093 (Google Search) http://www.debian.org/security/2014/dsa-3093 http://www.openwall.com/lists/oss-security/2014/11/13/6 RedHat Security Advisories: RHSA-2015:0087 http://rhn.redhat.com/errata/RHSA-2015-0087.html RedHat Security Advisories: RHSA-2015:0102 http://rhn.redhat.com/errata/RHSA-2015-0102.html RedHat Security Advisories: RHSA-2015:0284 http://rhn.redhat.com/errata/RHSA-2015-0284.html RedHat Security Advisories: RHSA-2015:0285 http://rhn.redhat.com/errata/RHSA-2015-0285.html RedHat Security Advisories: RHSA-2015:0695 http://rhn.redhat.com/errata/RHSA-2015-0695.html http://secunia.com/advisories/62305 http://secunia.com/advisories/62597 http://secunia.com/advisories/62735 SuSE Security Announcement: SUSE-SU-2015:0481 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SuSE Security Announcement: SUSE-SU-2015:0529 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html SuSE Security Announcement: SUSE-SU-2015:0652 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html SuSE Security Announcement: openSUSE-SU-2015:0566 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html