USN-3188-1

Details

Andrey Konovalov discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data. A remote attacker could use this to cause a denial of service (system crash).

Affected Packages

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-108.155

References

REPORThttps://ubuntu.com/security/CVE-2016-9555 ADVISORYhttps://ubuntu.com/security/notices/USN-3188-1

USN-3188-1

Details

Affected Packages

References

Upstream

Ecosystems

Timeline