From ff177ece3cac81a4431311b284e4d877a146988d Mon Sep 17 00:00:00 2001 From: Dan McDonald Date: Fri, 22 May 2026 13:11:02 -0400 Subject: [PATCH] security: SCTP socket option --- docs/security/index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/security/index.md b/docs/security/index.md index e5c1f6c..2a2ea58 100644 --- a/docs/security/index.md +++ b/docs/security/index.md @@ -71,6 +71,10 @@ w5tC1dgrtiLBxa/2Rok0meY6gd6oX8AcuWFGbo/FIx5McGQd/ntIGHbaOr+wjLqJ ## Recent vulnerabilities +- [SCTP frees wrong-size, and needs to keep private options private]( + https://illumos.topicbox.com/groups/developer/T9e4049ae8de3721a/18118-sctp-frees-wrong-size-and-need-to-keep-private-options) + [Bug 18118](https://illumos.org/issues/18118), + - [CVE-2023-31284](https://nvd.nist.gov/vuln/detail/CVE-2023-31284) ddi_parse needs len [Bug