Search/CVE-2021-3772
● CVE — Medium

CVE-2021-3772

Vendordebian, linux, netapp, redhat, oracleProductdebian linux, linux kernel, h300s firmware, h410c firmware, h410s firmware, h500s firmware, h610c firmware, h610s firmware, h615c firmware, h700s firmware, enterprise linux, e-series santricity os controller, solidfire & hci management node, communications cloud native core policy, hci compute node, solidfire & hci storage node, communications cloud native core binding support function, communications cloud native core network exposure functionDiscoveredMar 2, 2022UpdatedNov 21, 2024

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

CVSS v3.1
6.5 MEDIUM
EPSS
1.24%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Mar 2, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024