VULNERABILITY INTELLIGENCE
CVE-2019-3874
CVSS score6.5 MEDIUM
EPSS probability1.77%
CISA KEVNot currently listed
Published2019-03-25
Last modified2026-06-17
Description
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.