Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can dereference a NULL pointer via a COOKIE_ECHO, in
order to trigger a denial of service of the Linux kernel.

Impacted products: Fedora, Linux

Severity: 2/4

Creation date: 04/03/2014

DESCRIPTION OF THE VULNERABILITY

The SCTP protocol is used to transport several message streams,
multiplexed over one connection.

However, when the kernel receives an authenticated COOKIE_ECHO
packet, it does not check if a pointer is NULL, before using it.

An attacker can therefore dereference a NULL pointer via a
COOKIE_ECHO, in order to trigger a denial of service of the Linux
kernel.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Linux-kernel-NULL-pointer-dereference-via-COOKIE-ECHO-14354