In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "sctpmakechunk()" function (net/sctp/smmake_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.102"
}
]
},
{
"events": [
{
"introduced": "3.3"
},
{
"fixed": "4.1.51"
}
]
},
{
"events": [
{
"introduced": "4.3"
},
{
"fixed": "4.9.87"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.14.25"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.15.8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5803.json"