** Description changed: - net: sctp: NULL pointer dereference in af->from_addr_param on malformed - packet + The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP + implementation in the Linux kernel before 3.17.4, when ASCONF is used, + allows remote attackers to cause a denial of service (NULL pointer + dereference and system crash) via a malformed INIT chunk. Break-Fix: d6de3097592b7ae7f8e233a4dafb088e2aa8170f e40607cbe270a9e8360907cb1e62ddf0736e4864
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1392820 Title: CVE-2014-7841 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1392820/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
