CVE-2014-3688

CVE-2014-3688 is a denial-of-service vulnerability affecting the SCTP implementation in the Linux kernel prior to version 3.17.4. Remote attackers can exploit this by triggering excessive memory consumption through a large number of chunks in an association's output queue, specifically via ASCONF probes. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, leading to a potential denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.