The vulnerability exists in the sctp_parse_error_chunk function of the erts/emulator/drivers/common/inet_drv.c source file in Erlang OTP. This function parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated array without bounds checking, leading to a stack-based buffer overflow. An attacker with an established SCTP association can send a crafted SCTP ERROR chunk with enough cause codes to overflow the buffer and crash the BEAM VM. The overflow does not allow control over the return address, limiting the impact to denial of service. Additionally, the crafted chunk may leak small portions of Erlang VM memory in the error packet, but this data is already accessible to the user running the VM. The affected versions include OTP from 17.0 up to but not including 27.3.4.13, 28.5.0.2, and 29.0.2, and corresponding erts versions from 6.0 up to but not including 15.2.7.9, 16.4.0.2, and 17.0.2.

An unauthenticated remote attacker can cause a denial of service by crashing the Erlang BEAM VM via a stack-based buffer overflow triggered by a crafted SCTP ERROR chunk. The vulnerability does not allow arbitrary code execution or privilege escalation due to limited control over the overflow. Some limited memory disclosure may occur but only exposes data already accessible by the Erlang VM user, so it does not increase the attack surface significantly.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, consider restricting SCTP access or monitoring for unusual SCTP ERROR chunks to reduce exposure. Since this is a denial of service vulnerability exploitable remotely without authentication, minimizing exposure to untrusted SCTP traffic is advisable.