Vulnerability Description
The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.
CVSS Score
7.8
HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 8.4 |
References
- http://www.securityfocus.com/bid/72345
- http://www.securitytracker.com/id/1031649
- https://www.freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.ascVendor Advisory
- http://www.securityfocus.com/bid/72345
- http://www.securitytracker.com/id/1031649
- https://www.freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.ascVendor Advisory
FAQ
What is CVE-2014-8613?
CVE-2014-8613 is a vulnerability with a CVSS score of 7.8 (HIGH). The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a cra...
How severe is CVE-2014-8613?
CVE-2014-8613 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8613?
Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd.