From owner-freebsd-security@FreeBSD.ORG  Thu Jan 29 01:01:51 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 9E0341A1
 for <freebsd-security@freebsd.org>; Thu, 29 Jan 2015 01:01:51 +0000 (UTC)
Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com
 [IPv6:2607:f8b0:4003:c06::22c])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 6277CE70
 for <freebsd-security@freebsd.org>; Thu, 29 Jan 2015 01:01:51 +0000 (UTC)
Received: by mail-oi0-f44.google.com with SMTP id a3so21859687oib.3
 for <freebsd-security@freebsd.org>; Wed, 28 Jan 2015 17:01:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :cc:content-type;
 bh=z6iI5WEPKMXGb+/HNykhcdFbat8is6k+/N1q9VgDvHM=;
 b=snT6h5N++6CDV2ty6mJxwgvsG5h5XgHiq1DGtF5iz7qdueZ0c8YnV3O56ab2blVrXs
 bJnP2/Aq7ylbNRTgSrnogbNTf6Kkc5HqV+VLTpX3QGqiEoxZaFZ3YNYjQKHk9eSEIZLS
 SVl5PqIDkCYILRHPX/MxEACBs5RnIyxpL3HLoVHPFN4Y5oIS5RJA8xcz1Dq4nJKjXuYD
 fKGGw2S6zvZNtfio/7cvya8VVN5/eCz/qIrSBABtj+bTz/wA6HNRN1a9rooSaeEvz3mO
 NwGinDjpvS/zq7eH3jnXbCOEGtr7aPZ2VY+sLDHrk1SnjIMvxZh7B7UVjYMbZIB+yEyS
 GqhA==
MIME-Version: 1.0
X-Received: by 10.202.59.131 with SMTP id i125mr3709079oia.125.1422493310687; 
 Wed, 28 Jan 2015 17:01:50 -0800 (PST)
Received: by 10.182.247.74 with HTTP; Wed, 28 Jan 2015 17:01:50 -0800 (PST)
Received: by 10.182.247.74 with HTTP; Wed, 28 Jan 2015 17:01:50 -0800 (PST)
In-Reply-To: <54C9837C.8090704@akips.com>
References: <mailman.92.1422446402.71362.freebsd-security@freebsd.org>
 <20150128194011.2175B19F@hub.freebsd.org>
 <20150128211910.80082283DA18@rock.dv.isc.org>
 <54C966BF.9000803@rewt.org.uk> <54C9837C.8090704@akips.com>
Date: Wed, 28 Jan 2015 17:01:50 -0800
Message-ID: <CAKE2PDsC8dvx23H5DZ_b90F7PmPr3LB8kyw68SbuHgF4Hb+nkA@mail.gmail.com>
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:02.kmem
From: jungle Boogie <jungleboogie0@gmail.com>
To: Nick Frampton <nick.frampton@akips.com>
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1
Cc: freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Jan 2015 01:01:51 -0000

Hi Nick,
On Jan 28, 2015 4:56 PM, "Nick Frampton" <nick.frampton@akips.com> wrote:
>
> On 29/01/15 08:46, Joe Holden wrote:
>>
>> Really, how many SCTP users are there om the wild... maybe one?
>>
>> It shouldn't be in GENERIC at the very least!
>
>
> We use Netflow over SCTP in our network monitoring product, so it would
be a pain to have to build a custom kernel.

But also a pain to have an exploit when it could be prevented.

Its all about trade offs, right?

>
> Nick
> --
> Founder, CTO
> www.akips.com
>
>