NVD

Id
22406  
Name
CVE-2016-9555  
Description
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-11-27  
Modified Date
2017-01-06  
Seq
2016-9555  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118969 22406 CVE-2016-9555 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6  View
118970 22406 CVE-2016-9555 SUSE-SU-2016:3096  View
118971 22406 CVE-2016-9555 SUSE-SU-2016:3113  View
118972 22406 CVE-2016-9555 SUSE-SU-2016:3116  View
118973 22406 CVE-2016-9555 SUSE-SU-2016:3117  View
118974 22406 CVE-2016-9555 SUSE-SU-2016:3169  View
118975 22406 CVE-2016-9555 SUSE-SU-2016:3183  View
118976 22406 CVE-2016-9555 SUSE-SU-2016:3197  View
118977 22406 CVE-2016-9555 SUSE-SU-2016:3205  View
118978 22406 CVE-2016-9555 SUSE-SU-2016:3206  View
118979 22406 CVE-2016-9555 SUSE-SU-2016:3247  View
118980 22406 CVE-2016-9555 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8  View
118981 22406 CVE-2016-9555 [oss-security] 20161122 CVE Request: Linux: net/sctp: slab-out-of-bounds in sctp_sf_ootb  View
118982 22406 CVE-2016-9555 94479  View
118983 22406 CVE-2016-9555 1037339  View
118984 22406 CVE-2016-9555 https://bto.bluecoat.com/security-advisory/sa134  View
118985 22406 CVE-2016-9555 https://bugzilla.redhat.com/show_bug.cgi?id=1397930  View
118986 22406 CVE-2016-9555 https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6  View
118987 22406 CVE-2016-9555 https://groups.google.com/forum/#!topic/syzkaller/pAUcHsUJbjk  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5258 JVNDB-2016-006031 Linux Kernel の net/sctp/sm_statefuns.c の sctp_sf_ootb 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/sctp/sm_statefuns.c の sctp_sf_ootb 関数は、最初のチャンクの長さの確認を欠いているため、サービス運用妨害 (境界外のスラブ (slab) アクセス) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-9555 96062 CVE-2016-9555 22406 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006031.html 2016-11-15 2016-11-30 View