CVE-2014-8613

High

Published: 02/02/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.

Risk Assessment

Attackers can exploit this vulnerability to remotely trigger a kernel panic, leading to system downtime and potential loss of service availability.

Recommendation

It is recommended to update FreeBSD to the latest version to mitigate this vulnerability and to monitor the system for unauthorized access attempts.

Other vulnerabilities in Moduł sctp w FreeBSD

CVE-2016-1879High
The SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service via a crafted ICMPv6 packet.

Original NVD description (English source)