> DESCRIPTION
Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic.
Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset.
> CWE DETAILED DESCRIPTIONS
CWE-674: Uncontrolled Recursion - The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack. | CWE-791: Incomplete Filtering of Special Elements - The product receives data from an upstream component, but it does not completely filter special elements before sending it to a downstream component.