← Database

CVE-2021-3772

MEDIUM CVSS: 6.5 Published: 2022-03-02 Modified: 2026-06-17

Description

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

Affected Platforms

Netapp H615CNetapp H300S FirmwareNetapp Hci Compute NodeDebian Debian LinuxNetapp H610SNetapp H700SLinux Linux KernelOracle Communications Cloud Native Core Network Exposure FunctionNetapp H610S FirmwareOracle Communications Cloud Native Core Binding Support Function

Weakness Type

CWE-354, CWE-354

References