CVE-2009-0065

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

From the Ubuntu Security Team

The SCTP stack did not correctly validate FORWARD-TSN packets. A remote attacker could send specially crafted SCTP traffic causing a system crash, leading to a denial of service.

• How can I get the fixes?
• What do statuses mean?
• Patch details

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-752-1
• Linux kernel vulnerabilities
• 7 April 2009
• USN-751-1
• Linux kernel vulnerabilities
• 6 April 2009

Other references

• https://bugzilla.redhat.com/show_bug.cgi?id=478800
• https://www.cve.org/CVERecord?id=CVE-2009-0065