FreeBSD Security Advisory FreeBSD-SA-15:02.kmem

Oliver Pinter oliver.pinter at hardenedbsd.org
Wed Jan 28 23:24:44 UTC 2015


Much more, than you explain. Hint: 3G and 4G mobile core networks. ;)

On Wed, Jan 28, 2015 at 11:46 PM, Joe Holden <lists at rewt.org.uk> wrote:
> Really, how many SCTP users are there om the wild... maybe one?
>
> It shouldn't be in GENERIC at the very least!
>
>
> On 28/01/2015 21:19, Mark Andrews wrote:
>>
>>
>> In message <20150128194011.2175B19F at hub.freebsd.org>, "Roger Marquis"
>> writes:
>>>>>
>>>>> If SCTP is NOT compiled in the kernel, are you still vulnerable ?
>>>>
>>>>
>>>> No -- we should have mentioned that too.  For GENERIC kernel however
>>>> SCTP is compiled in.
>>>
>>>
>>> Should probably fix that too, in GENERIC, considering how little used
>>> this
>>> protocol is.
>>
>>
>> It is not used much because there is not critical mass and you want
>> to reduce what little there is out there?  It is a good thing that
>> it is in GENERIC.
>>
>> Mark
>>
>>> Roger Marquis
>>>
>>> _______________________________________________
>>> freebsd-security at freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-security
>>> To unsubscribe, send any mail to
>>> "freebsd-security-unsubscribe at freebsd.org"
>
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"


More information about the freebsd-security mailing list