Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

None

Attack Vector

Network

0

CVE-2016-9555

Disclosure Date: November 28, 2016 •

CVE-2016-9555 CVSS v3 Base Score: 9.8

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

9.8 Critical

Impact Score:

5.9

Exploitability Score:

3.9

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector (AV):

Network

Attack Complexity (AC):

Low

Privileges Required (PR):

None

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

High

Availability (A):

High

Vendors

linux

Products

linux kernel

References

Canonical

CVE-2016-9555 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9555)

BID-94479 (http://www.securityfocus.com/bid/94479)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html

https://bto.bluecoat.com/security-advisory/sa134

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html

SECTRACK-1037339 (http://www.securitytracker.com/id/1037339)

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html

https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6

https://groups.google.com/forum#!topic/syzkaller/pAUcHsUJbjk

http://rhn.redhat.com/errata/RHSA-2017-0086.html

http://rhn.redhat.com/errata/RHSA-2017-0113.html

http://rhn.redhat.com/errata/RHSA-2017-0091.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html

[oss-security] 20161122 CVE Request: Linux: net/sctp: slab-out-of-bounds in sctp_sf_ootb (http://www.openwall.com/lists/oss-security/2016/11/22/18)

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html

https://bugzilla.redhat.com/show_bug.cgi?id=1397930

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html

http://rhn.redhat.com/errata/RHSA-2017-0307.html

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html

Rapid7

Technical Analysis