CVE:CVE-2014-5077
CNNVD:CNNVD-201407-750
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 3.15.7及之前版本存在代码问题漏洞。当程序使用SCTP身份验证时，远程攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 3.2.63,3.4.103,3.10.53,3.12.27,3.14.17,3.15.10,and avoid the version [2.6.24,3.2.63),[3.3,3.4.103),[3.5,3.10.53),[3.11,3.12.27),[3.13,3.14.17),[3.15,3.15.10); Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade redhat enterprise_linux_eus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,6.5,and avoid the version 6.2,6.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.5,and avoid the version 6.5; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04