VULNERABILITY INTELLIGENCE

CVE-2019-3874

CVSS score6.5 MEDIUM
EPSS probability1.77%
CISA KEVNot currently listed
Published2019-03-25
Last modified2026-06-17

Description

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.