PT-2016-4909 · Freebsd · Freebsd

Jonathan T. Looney · Publicado 2016-01-14 · Atualizado 2017-09-10 · CVE-2016-1879

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p33 FreeBSD versions 10.1 before p26 FreeBSD versions 10.2 before p9

Description The issue affects the Stream Control Transmission Protocol (SCTP) module when the kernel is configured for IPv6. It allows remote attackers to cause a denial of service, potentially leading to an assertion failure, NULL pointer dereference, or kernel panic, via a crafted ICMPv6 packet.

Recommendations For FreeBSD version 9.3, update to p33 or later to resolve the issue. For FreeBSD version 10.1, update to p26 or later to resolve the issue. For FreeBSD version 10.2, update to p9 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2016-1879

FREEBSD-SA-16_01

Produtos afetados

Freebsd

Referências · 6

• 🔥 https://exploit-db.com/exploits/39305 · Exploit
• https://freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc · Aviso do Fabricante
• http://securitytracker.com/id/1034673 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1879 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1879 · Aviso do Fabricante
• http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html · Nota