VULNERABILITY INTELLIGENCE

CVE-2021-3772

CVSS score6.5 MEDIUM
EPSS probability1.24%
CISA KEVNot currently listed
Published2022-03-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Description

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

Weakness classification

  • CWE-354: Improper Validation of Integrity Check Value

Primary references