CVE-2014-8613

The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a crafted RECONFIG chunk...

CVE-2014-8613

CVE-2014-8613 affects FreeBSD SCTP support; vulnerable versions include FreeBSD 8.4 (before p23), 9.3 (before p9), 10.0 (before p17), and 10.1 (before p5). The issue lies in insufficient input validation of received SCTP RE_CONFIG chunks, which can trigger a NULL pointer dereference leading to a ...