CVE-2019-20503

Name of the Vulnerable Software and Affected Versions usrsctp versions prior to 2019-12-20

Description The issue is related to out-of-bounds reads in the sctp load addresses from init function of the usrsctp implementation. This can potentially allow a remote attacker to cause a denial of service.

Recommendations For usrsctp versions prior to 2019-12-20, update to a version released after 2019-12-20 to resolve the issue. As a temporary workaround, consider restricting access to the sctp load addresses from init function until a patch is available.