27 matches found
kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing
A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. A remote attacker could send a specially crafted sequence of ASCONF Add IP Address Configuration chunks, including DEL-IP Delete IP Address parameters, to trigger a use-after-free condition...
9.8CVSS8.8AI score0.01482EPSS
SaveExploits2References5
20