Bug #8661: sctp: unsigned overflow leads to buffer overflow - Suricata - Open Information Security Foundation

Actions

Bug #8661

closed

PA PA

sctp: unsigned overflow leads to buffer overflow

Bug #8661: sctp: unsigned overflow leads to buffer overflow

Added by Philippe Antoine about 2 months ago. Updated 10 days ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

We have uint8_t chunk_cnt = 0; but it can overflow and loop, resulting in tracked_chunk_cnt growing over SCTP_MAX_TRACKED_CHUNKS

Files

clusterfuzz-testcase-minimized-fuzz_decodepcapfile-4695003436482560 (52.6 KB) clusterfuzz-testcase-minimized-fuzz_decodepcapfile-4695003436482560

Philippe Antoine, 06/16/2026 09:46 AM

Actions

Also available in: PDF Atom