Wind River Support Network

HomeDefectsSCP7-836

Fixed

SCP7-836 : Security Advisory - linux - CVE-2018-5803

Created: Jun 14, 2018 Updated: Mar 8, 2020

Resolved Date: Jun 30, 2019

Found In Version: 7.0.0.28

Fix Version: 7.0.0.30

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Kernel

Description

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the _sctp_make_chunk() function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

https://nvd.nist.gov/vuln/detail/CVE-2018-5803