Home

CVE-2019-3874

Description

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.178

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-generic-lts-xenial_4.4.0.148.130_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-generic-lts-xenial_4.4.0.148.130_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-virtual-lts-xenial_4.4.0.148.130_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-virtual-lts-xenial_4.4.0.148.130_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-lowlatency-lts-xenial_4.4.0.148.130_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3932-2) linux-image-lowlatency-lts-xenial_4.4.0.148.130_amd64.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-1046-kvm_4.4.0-1046.52_amd64.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-1083-aws_4.4.0-1083.93_amd64.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-148-generic_4.4.0-148.174_i386.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-148-generic_4.4.0-148.174_amd64.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-148-lowlatency_4.4.0-148.174_i386.debLinux
Linux kernel (USN-3982-1) linux-image-4.4.0-148-lowlatency_4.4.0-148.174_amd64.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-generic-lts-xenial_4.4.0.148.130_i386.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-generic-lts-xenial_4.4.0.148.130_amd64.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-virtual-lts-xenial_4.4.0.148.130_i386.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-virtual-lts-xenial_4.4.0.148.130_amd64.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-lowlatency-lts-xenial_4.4.0.148.130_i386.debLinux
Linux hardware enablement kernel from Xenial for Trusty (USN-3982-2) linux-image-lowlatency-lts-xenial_4.4.0.148.130_amd64.debLinux
Kernel-uek update (ELSA-2020-5913) kernel-uek-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-debug update (ELSA-2020-5913) kernel-uek-debug-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-debug-devel update (ELSA-2020-5913) kernel-uek-debug-devel-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-devel update (ELSA-2020-5913) kernel-uek-devel-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-tools update (ELSA-2020-5913) kernel-uek-tools-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-doc update (ELSA-2020-5913) kernel-uek-doc-4.14.35-2025.402.2.1.el7uek.noarch.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234