Launchpad.net

CVE 2014-0101

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

Related bugs and status

CVE-2014-0101 (Candidate) is related to these bugs:

Bug #1287398: hyper-v: frame buffer driver not loading in Generation 2 mode

Summary				In	Importance	Status
	1287398	hyper-v: frame buffer driver not loading in Generation 2 mode		linux (Ubuntu)	High	Fix Released

Bug #1290151: hyper-v: Hyper-V network broken for Trusty on Server 2008R2

Summary				In	Importance	Status
	1290151	hyper-v: Hyper-V network broken for Trusty on Server 2008R2		linux (Ubuntu)	High	Fix Released

Bug #1291890: Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver

Summary				In	Importance	Status
	1291890	Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver		linux (Ubuntu)	Medium	Fix Released
	1291890	Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver		linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1292216: hyper-v: Hyper-V drivers missing from UEFI based installer

		In	Importance	Status
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	linux (Ubuntu)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	linux (Ubuntu Trusty)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	debian-installer (Ubuntu)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	debian-installer (Ubuntu Trusty)	High	Fix Released

Bug #1293361: xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)

Summary				In	Importance	Status
	1293361	xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)		linux (Ubuntu)	Critical	Fix Released
	1293361	xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)		linux (Ubuntu Trusty)	Critical	Fix Released

Bug #1293714: CVE-2014-0101

		In	Importance	Status
1293714	CVE-2014-0101	linux (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-mvl-dove (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-ec2 (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-armadaxp (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-saucy (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-saucy (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-quantal (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-raring (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-raring (Ubuntu Precise)	Medium	Fix Released
1293714	CVE-2014-0101	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	Won't Fix
1293714	CVE-2014-0101	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-trusty (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-utopic (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-utopic (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-lts-utopic (Ubuntu Vivid)	Medium	Invalid
1293714	CVE-2014-0101	linux-goldfish (Ubuntu)	Medium	New
1293714	CVE-2014-0101	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-goldfish (Ubuntu Vivid)	Medium	Won't Fix
1293714	CVE-2014-0101	linux-flo (Ubuntu)	Medium	New
1293714	CVE-2014-0101	linux-flo (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-flo (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-flo (Ubuntu Vivid)	Medium	Won't Fix
1293714	CVE-2014-0101	linux-mako (Ubuntu)	Medium	New
1293714	CVE-2014-0101	linux-mako (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-mako (Ubuntu Trusty)	Medium	Invalid
1293714	CVE-2014-0101	linux-mako (Ubuntu Vivid)	Medium	New
1293714	CVE-2014-0101	linux-manta (Ubuntu)	Medium	Invalid
1293714	CVE-2014-0101	linux-manta (Ubuntu Precise)	Medium	Invalid
1293714	CVE-2014-0101	linux-manta (Ubuntu Trusty)	Medium	Invalid

Bug #1293725: linux: 3.13.0-18.38 -proposed tracker

		In	Importance	Status
1293725	linux: 3.13.0-18.38 -proposed tracker	linux (Ubuntu)	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow automated-testing	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package-meta	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package-signed	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow promote-to-release	Medium	Fix Released

Bug #1295090: CVE-2014-2523

		In	Importance	Status
1295090	CVE-2014-2523	linux (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-mvl-dove (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-ec2 (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-ti-omap4 (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-armadaxp (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-saucy (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-saucy (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-quantal (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-quantal (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-raring (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-raring (Ubuntu Precise)	Medium	Fix Released
1295090	CVE-2014-2523	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	Won't Fix
1295090	CVE-2014-2523	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-trusty (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-utopic (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-utopic (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-lts-utopic (Ubuntu Vivid)	Medium	Invalid
1295090	CVE-2014-2523	linux-goldfish (Ubuntu)	Medium	New
1295090	CVE-2014-2523	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-goldfish (Ubuntu Vivid)	Medium	Won't Fix
1295090	CVE-2014-2523	linux-flo (Ubuntu)	Medium	New
1295090	CVE-2014-2523	linux-flo (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-flo (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-flo (Ubuntu Vivid)	Medium	Won't Fix
1295090	CVE-2014-2523	linux-mako (Ubuntu)	Medium	New
1295090	CVE-2014-2523	linux-mako (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-mako (Ubuntu Trusty)	Medium	Invalid
1295090	CVE-2014-2523	linux-mako (Ubuntu Vivid)	Medium	New
1295090	CVE-2014-2523	linux-manta (Ubuntu)	Medium	Invalid
1295090	CVE-2014-2523	linux-manta (Ubuntu Precise)	Medium	Invalid
1295090	CVE-2014-2523	linux-manta (Ubuntu Trusty)	Medium	Invalid

Bug #1300852: linux: 2.6.32-58.120 -proposed tracker

		In	Importance	Status
1300852	linux: 2.6.32-58.120 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1300852	linux: 2.6.32-58.120 -proposed tracker	linux (Ubuntu Lucid)	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow prepare-package-lbm	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow prepare-package-ports-meta	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1300852	linux: 2.6.32-58.120 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1301071: linux-ec2: 2.6.32-363.76 -proposed tracker

		In	Importance	Status
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	linux-ec2 (Ubuntu)	Medium	Invalid
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	linux-ec2 (Ubuntu Lucid)	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Won't Fix
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Fix Released
1301071	linux-ec2: 2.6.32-363.76 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-0101

Related bugs and status

Related bugs

References