Lucene search

K
f5F5F5:K54095660
HistoryFeb 22, 2017 - 12:00 a.m.

K54095660 : Linux kernel vulnerability CVE-2016-9555

2017-02-2200:00:00
my.f5.com
41

AI Score

9.6

Confidence

High

EPSS

0.736

Percentile

98.1%

Security Advisory Description

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data. (CVE-2016-9555)
Impact
This vulnerability allows unauthorized disclosure of information, unauthorized modification, and disruption of service.