PT-2015-4056 · Freebsd · Freebsd

Published 2015-02-02 · Updated 2015-02-04 · CVE-2014-8613

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.4 before p23 FreeBSD versions 9.3 before p9 FreeBSD versions 10.0 before p17 FreeBSD versions 10.1 before p5

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic due to a NULL pointer dereference, via a crafted RE CONFIG chunk.

Recommendations For FreeBSD version 8.4, update to p23 or later. For FreeBSD version 9.3, update to p9 or later. For FreeBSD version 10.0, update to p17 or later. For FreeBSD version 10.1, update to p5 or later.

Fix

Related Identifiers

CVE-2014-8613

Affected Products

Freebsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-8613 · Security Note
• https://freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.asc · Vendor Advisory
• http://securitytracker.com/id/1031649 · Note
• http://securityfocus.com/bid/72345 · Note