CVE-2026-53246: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP server processes a COOKIEECHO chunk, the cached peer INIT chunk embedded after the cookie is parsed and its parameters are later walked b...

usrsctp:fuzzer_listen: Heap-buffer-overflow in sctp_process_init

Detailed Report: https://oss-fuzz.com/testcase?key=5666335069306880 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerlisten Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000004900 Crash State: sctpprocessinit sctpprocesscontrol...

OSV-2020-2000 Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26197 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sctpprocessinit sctpprocesscookieexisting sctphandlecookieecho...

usrsctp:fuzzer_listen: Heap-buffer-overflow in sctp_process_init

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5077370870169600 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerlisten Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow...

Code injection

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service OOPS via an INIT-ACK that states the peer does not support AUTH, which causes the sctpprocessinit function to clean up active transports and triggers the OOPS when the T1-Init timer expires...

CVE-2008-4576: Improper Authentication

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service OOPS via an INIT-ACK that states the peer does not support AUTH, which causes the sctpprocessinit function to clean up active transports and triggers the OOPS when the T1-Init timer expires...