ID CVE-2012-3549
Summary The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk. Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'
References
Vulnerable Configurations
  • cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*
    cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 30-01-2013 - 05:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 54797
exploit-db 20226
misc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686962
mlist
  • [oss-security] 20120828 CVE for FreeBSD SCTP remote DoS?
  • [oss-security] 20120829 Re: CVE request: FreeBSD SCTP remote DoS
Last major update 30-01-2013 - 05:00
Published 09-10-2012 - 23:55
Last modified 30-01-2013 - 05:00
Back to Top