OSV-2020-2000 Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26197 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sctpprocessinit sctpprocesscookieexisting sctphandlecookieecho...

usrsctp:fuzzer_listen: Heap-buffer-overflow in sctp_process_init

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5077370870169600 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerlisten Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow...

Code injection

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service OOPS via an INIT-ACK that states the peer does not support AUTH, which causes the sctpprocessinit function to clean up active transports and triggers the OOPS when the T1-Init timer expires...