CVE-2019-8956

Published: Apr 1, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.

Vendor	Product	Versions
UNKNOWN	Linux Kernel	affected `4.20.x prior to 4.20.8` affected `4.19.x prior to 4.19.21`

References

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21

x_refsource_MISC

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.8

x_refsource_MISC

https://secuniaresearch.flexerasoftware.com/secunia_research/2019-5/

x_refsource_MISC

https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=ba59fb0273076637f0add4311faa990a5eec27c0

x_refsource_MISC

USN-3930-1

vendor-advisory

x_refsource_UBUNTU

USN-3930-2

vendor-advisory

x_refsource_UBUNTU

https://support.f5.com/csp/article/K12671141

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-8956

Description

Affected Products

References