Lucene search

K
freebsdFreeBSD0AAD3CE5-600A-11E6-A6C3-14DAE9D210B8
HistoryJan 27, 2015 - 12:00 a.m.

FreeBSD -- SCTP stream reset vulnerability

2015-01-2700:00:00
vuxml.freebsd.org
10

0.007 Low

EPSS

Percentile

80.3%

Problem Description:
The input validation of received SCTP RE_CONFIG chunks
is insufficient, and can result in a NULL pointer deference
later.
Impact:
A remote attacker who can send a malformed SCTP packet
to a FreeBSD system that serves SCTP can cause a kernel
panic, resulting in a Denial of Service.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd-kernel= 10.1UNKNOWN
FreeBSDanynoarchfreebsd-kernel< 10.1_5UNKNOWN

0.007 Low

EPSS

Percentile

80.3%