CVE-2016-9555 The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-o...
CriticalCVSS 9.8
EPSS 10.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.8.11-1 | 4.8.11-1 |
| debian/linux(Debian:13) | < 4.8.11-1 | 4.8.11-1 |
| debian/linux(Debian:14) | < 4.8.11-1 | 4.8.11-1 |
| Linux kernel | >= 3.2, < 3.2.85 | 3.2.85 |
| Linux kernel | >= 3.3, < 3.10.105 | 3.10.105 |
| Linux kernel | >= 3.11, < 3.12.68 | 3.12.68 |
| Linux kernel | >= 3.13, < 3.16.40 | 3.16.40 |
| Linux kernel | >= 3.17, < 3.18.49 | 3.18.49 |
| Linux kernel | >= 3.19, < 4.4.32 | 4.4.32 |
| Linux kernel | >= 4.5.0, < 4.8.8 | 4.8.8 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3161-1 vendor-advisory
- USN-3161-2 vendor-advisory
- USN-3161-3 vendor-advisory
- USN-3161-4 vendor-advisory
- USN-3162-1 vendor-advisory
- USN-3162-2 vendor-advisory
- USN-3187-1 vendor-advisory
- USN-3188-1 vendor-advisory
- USN-3188-2 vendor-advisory
- USN-3187-2 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-9555 vendor-advisory
- git.kernel.org issue-tracking patch vendor-advisory
- SUSE-SU-2016:3096 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3113 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3116 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3117 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3169 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3183 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3197 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3205 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3206 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:3247 mailing-list third-party-advisory vendor-advisory
- RHSA-2017:0086 third-party-advisory vendor-advisory
- RHSA-2017:0091 third-party-advisory vendor-advisory
- RHSA-2017:0113 third-party-advisory vendor-advisory
- RHSA-2017:0307 third-party-advisory vendor-advisory
- www.kernel.org release-notes vendor-advisory
- [oss-security] 20161122 CVE Request: Linux: net/sctp: slab-out-of-bounds in sctp_sf_ootb mailing-list third-party-advisory
- 94479 third-party-advisory vdb-entry
- 1037339 third-party-advisory vdb-entry
- bto.bluecoat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com issue-tracking patch third-party-advisory
- groups.google.com