Re: [PATCH nf] netfilter/xt_sctp: validate the flag_info count
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2023-08-30 18:55:53
Also in:
lkml, netfilter-devel
On Mon, Aug 28, 2023 at 07:12:55PM -0300, Wander Lairson Costa wrote:
sctp_mt_check doesn't validate the flag_count field. An attacker can take advantage of that to trigger a OOB read and leak memory information. Add the field validation in the checkentry function.
Applied to nf, thanks