oss-security - CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 25 Sep 2008 07:45:23 +0800
From: Eugene Teo <eteo@...hat.com>
To: oss-security@...ts.openwall.com
CC: coley@...re.org
Subject: CVE-2008-4113 update: kernel: sctp: fix random memory dereference
 with SCTP_HMAC_IDENT option

Hi Steve,

The first three references to CVE-2008-4113[1] are incorrect. Please
update the CVE with the following references:

http://marc.info/?l=linux-sctp&m=121986743009093&w=2
http://marc.info/?l=linux-sctp&m=121986743209110&w=2

[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113

Thanks, Eugene
-- 
Eugene Teo / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.