Mittel 5.9Linux-Server
CVE-2026-119299
github.com/gopacket/gopacket: gopacket: Denial of Service via crafted SCTP packets
github.com/gopacket/gopacket
## Summary gopacket decodes SCTP (IP protocol 132) by walking the chunk chain through per-chunk-type decoder functions (`decodeSCTPInit`, `decodeSCTPShutdown`, `decodeSCTPError`, `decodeSCTPSack`, in `layers/sctp.go`). Each of these reads fixed-size header fields and runs count-driven loops **without validating the chunk's declared length against the minimums those reads require**. A single crafted SCTP segment causes a runtime panic (out-of-bounds slice read, or inverted…
30. Okt 2026
Original bei Red Hat öffnen