PT-2022-35782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.262 Description The issue is related to the handling of an error returned from sctp auth asoc init active key. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-35547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to handling the error returned from sctp auth asoc init active key. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2010-3705

The sctpauthasocgethmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmacids array of an SCTP peer, which allows remote attackers to cause a denial of service memory corruption and panic via a crafted value in the last element of this array...