debian/libusrsctp vulnerabilities

Latest debian/libusrsctp CVEs

Newest publication first

1. DLA-3481-1 libusrsctp - security update

   Published 2023-07-06

   Unknown

2. CVE-2022-46871 An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.

   Published 2022-12-22

   High·CVSS 8.8 EPSS 0.97%

   An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.

3. CVE-2019-20503 usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

   Published 2020-03-06

   Medium·CVSS 6.5 EPSS 3.1%

   usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.