Lucene search

CVE-2016-9555

🗓️ 28 Nov 2016 03:17:59Reported by mitreType

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data

Reporter	Title	Published	Views	Family All 169
Debian CVE	CVE-2016-9555	28 Nov 201603:59	–	debiancve
Prion	Out-of-bounds	28 Nov 201603:59	–	prion
RedhatCVE	CVE-2016-9555	23 Nov 201617:19	–	redhatcve
Tenable Nessus	Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-3188-1)	3 Feb 201700:00	–	nessus
Tenable Nessus	Ubuntu 12.04 LTS : linux-lts-trusty vulnerability (USN-3188-2)	3 Feb 201700:00	–	nessus
Tenable Nessus	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3652)	13 Dec 201600:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3651)	13 Dec 201600:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (RHSA-2017:0307)	24 Feb 201700:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3113-1)	14 Dec 201600:00	–	nessus
Tenable Nessus	Virtuozzo 6 : kernel / kernel-abi-whitelists / kernel-debug / etc (VZLSA-2017-0307)	13 Jul 201700:00	–	nessus

Nvd

Node

linux linux_kernelRange3.2–3.2.85

linux linux_kernelRange3.3–3.10.105

linux linux_kernelRange3.11–3.12.68

linux linux_kernelRange3.13–3.16.40

linux linux_kernelRange3.17–3.18.49

linux linux_kernelRange3.19–4.4.32

linux linux_kernelRange4.5.0–4.8.8

Source	Link
securityfocus	www.securityfocus.com/bid/94479
lists	www.lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html
rhn	www.rhn.redhat.com/errata/RHSA-2017-0091.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html
securitytracker	www.securitytracker.com/id/1037339
rhn	www.rhn.redhat.com/errata/RHSA-2017-0307.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Nov 2016 03:59Current

9.6High risk

Vulners AI Score9.6

CVSS210

CVSS39.8

EPSS0.434

CWE-125