CVEs-PoC/2008/CVE-2008-2826.md

### [CVE-2008-2826](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2826)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.

### POC

#### Reference
- http://www.ubuntu.com/usn/usn-625-1

#### Github
No PoCs found on GitHub currently.