MidnightBSD Developer Journal

 

Fix an integer overflow in IP_MSFILTER (IP MULTICAST). This could be exploited to read memory by a user process.

 

When initializing the SCTP state cookie being sent in INIT-ACK chunks,

a buffer allocated from the kernel stack is not completely initialized.

 

Patches obtained from: FreeBSD