< Chronological >      < Thread >

Dear all,

Question to unexpected chunks with invalid mandatory parameters (e.g. MIS=0, OS=0, Init-Tag=0):
As far as I understand the sctp.de implementation, it is possible to attack a running association with e.g. an INIT and invalid mandatory parameters. After receive of that unexpected chunks the prototype does delete the running association (pre 16: sctp-control.c, func scr_init, line 677). Is that a correct behaviour according to RFC?

Mit freundlichen Gruessen / Best regards
Thomas Hollaus

SIEMENS AG Austria
Program and Systems Engineering
mailto:thomas.hollaus AT siemens.at
http://www.pse.siemens.at

• [SCTP-Discussion] receive of unexpected chunks with invalid parameters, Hollaus Thomas, 02/14/2002
  • Possible DoS in SCTP ? (was: [SCTP-Discussion] receive of unexpected chunks with invalid parameters), Andreas Jungmaier, 02/14/2002
    • Re: [Tsvwg] Possible DoS in SCTP ? (was: [SCTP-Discussion] receive of unexpected chunks with invalid parameters), Randall Stewart, 02/14/2002
      • [SCTP-Discussion] Re: [Tsvwg] Possible DoS in SCTP ? (was: reception of invalid parameters), Andreas Jungmaier, 02/14/2002
        • [SCTP-Discussion] Re: [Tsvwg] Possible DoS in SCTP ? (was: reception of invalid parameters), Randall Stewart, 02/14/2002
          • [SCTP-Discussion] Re: [Tsvwg] Possible DoS in SCTP ?, Andreas Jungmaier, 02/14/2002
            • [SCTP-Discussion] Re: [Tsvwg] Possible DoS in SCTP ?, Randall Stewart, 02/14/2002
              • [SCTP-Discussion] Re: [Tsvwg] Possible DoS in SCTP ?, Andreas Jungmaier, 02/14/2002

Archive powered by MHonArc 2.6.19+.