CVE-2014-8613

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-02 · updated 2026-06-17

Description

The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.

Affected products

FreeBSD: 8.4, 9.3, 10.1

References

http://www.securityfocus.com/bid/72345
http://www.securitytracker.com/id/1031649
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.asc
http://www.securityfocus.com/bid/72345
http://www.securitytracker.com/id/1031649
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.asc

Get alerted when CVE-2014-8613 or the next vulnerability affects your stack