CVE-2012-3549

Published: Oct 9, 2012Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk.

Affected (1)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 8.2

References (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686962

Source: secalert@redhat.com

http://www.exploit-db.com/exploits/20226

Source: secalert@redhat.com

Exploit

http://www.openwall.com/lists/oss-security/2012/08/28/9

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/29/6

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54797

Source: secalert@redhat.com

Exploit

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686962