Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-3549. PoCs published by Shaun Colley.
AI-analyzed exploit summary This exploit triggers a remote NULL pointer dereference in the FreeBSD kernel's SCTP implementation by sending a malformed ASCONF chunk, causing a denial-of-service (DoS) condition. The vulnerability arises from improper handling of invalid vtags in the `sctp_findassoc_by_vtag` function.
Description
The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk.
Exploits (1)
This exploit triggers a remote NULL pointer dereference in the FreeBSD kernel's SCTP implementation by sending a malformed ASCONF chunk, causing a denial-of-service (DoS) condition. The vulnerability arises from improper handling of invalid vtags in the `sctp_findassoc_by_vtag` function.