Quantum Secular Labs / Blog / Advisories

CVE-2015-1421: Linux Kernel: Use after free

CVE-2015-1421 has a CVSS v2 base score of 10.0 (the maximum on that scale) and affects Linux Kernel, along with 2 other products in NVD’s configuration data. Per its scoring, it can be exploited over the network, without authentication. The scored impact on confidentiality, integrity and availability is the highest available.

Vulnerability description

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

Severity breakdown

CVSS v2.0 10.0: AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access vector: Network. Exploitable remotely over the network.
  • Access complexity: Low. No special conditions are required.
  • Authentication: None. No authentication is needed.
  • Confidentiality impact: Complete. Total information disclosure.
  • Integrity impact: Complete. Total loss of integrity.
  • Availability impact: Complete. Total shutdown of the component.

Affected products

  • Linux Kernel: from 2.6.24 before 3.2.67; from 3.3 before 3.4.107; from 3.5 before 3.10.70; from 3.11 before 3.12.38; from 3.13 before 3.14.34; from 3.15 before 3.16.35; from 3.17 before 3.18.8
  • Canonical Ubuntu Linux: 12.04; 14.04; 14.10
  • Debian Linux: 7.0; 8.0

References