Vulnerability in Freebsd

CVE-2014-8613

The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.

EPSS: 0.028 (85.1th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 8.4, 9.3, 10.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)