Problem Description:
The input validation of received SCTP RE_CONFIG chunks
is insufficient, and can result in a NULL pointer deference
later.
Impact:
A remote attacker who can send a malformed SCTP packet
to a FreeBSD system that serves SCTP can cause a kernel
panic, resulting in a Denial of Service.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | freebsd-kernel | = 10.1 | UNKNOWN |
FreeBSD | any | noarch | freebsd-kernel | < 10.1_5 | UNKNOWN |