The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 8.4 (including) | 8.4 (including) |
| Freebsd | Freebsd | 9.3 (including) | 9.3 (including) |
| Freebsd | Freebsd | 10.1 (including) | 10.1 (including) |
| Kfreebsd-8 | Ubuntu | lucid | * |