Astra Linux – Vulnerability in libusrsctp

The usrsctp before December 20, 2019, has out-of-bounds reads in sctploadaddressesfrominit...

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

...

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

AZL-35345 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

PT-2020-2071

Name of the Vulnerable Software and Affected Versions usrsctp versions prior to 2019-12-20 Description The issue is related to out-of-bounds reads in the sctp load addresses from init function of the usrsctp implementation. This can potentially allow a remote attacker to cause a denial of service...