CVE-2016-9555

high-risk

Published 2016-11-28

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.

Do I need to act?

26.9% chance of exploitation in next 30 days

EPSS score — higher than 73% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (1)

Linux Kernel

Affected Vendors

Linux

References (46)

Issue Tracking http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e...

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0086.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0091.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0113.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0307.html

Release Notes http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8

Mailing List http://www.openwall.com/lists/oss-security/2016/11/22/18

Third Party Advisory http://www.securityfocus.com/bid/94479

Third Party Advisory http://www.securitytracker.com/id/1037339

Third Party Advisory https://bto.bluecoat.com/security-advisory/sa134

and 26 more references

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 15/34 · Moderate

Exposure 5/34 · Minimal