Files
CVEs-PoC/2018/CVE-2018-5803.md
T
2024-06-18 02:51:15 +02:00

20 lines
801 B
Markdown

### [CVE-2018-5803](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5803)
![](https://img.shields.io/static/v1?label=Product&message=Linux%20Kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service&color=brighgreen)
### Description
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.
### POC
#### Reference
- https://usn.ubuntu.com/3698-1/
- https://usn.ubuntu.com/3698-2/
- https://www.spinics.net/lists/netdev/msg482523.html
#### Github
No PoCs found on GitHub currently.