Sourque

**Name of the Vulnerable Software and Affected Versions** illumos distributions prior to illumos-gate commit 53a3efde **Description** The SCTP inbound path performs association lookup for INIT ACK chunks without properly validating the address parameters within the chunk. Because this process occurs during packet classification, before SCTP integrity checks or IPsec policies are applied, a remote, unauthenticated attacker can send a crafted SCTP INIT ACK packet with malformed address parameters. This can trigger an out-of-bounds access and kernel heap corruption, potentially resulting in remote code execution. **Recommendations** Update illumos distributions to illumos-gate commit 53a3efde or later.