PT-2016-4909 · Freebsd · Freebsd

Jonathan T. Looney · Published 2016-01-14 · Updated 2017-09-10 · CVE-2016-1879

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p33 FreeBSD versions 10.1 before p26 FreeBSD versions 10.2 before p9

Description The issue affects the Stream Control Transmission Protocol (SCTP) module when the kernel is configured for IPv6. It allows remote attackers to cause a denial of service, potentially leading to an assertion failure, NULL pointer dereference, or kernel panic, via a crafted ICMPv6 packet.

Recommendations For FreeBSD version 9.3, update to p33 or later to resolve the issue. For FreeBSD version 10.1, update to p26 or later to resolve the issue. For FreeBSD version 10.2, update to p9 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2016-1879

FREEBSD-SA-16_01

Affected Products

Freebsd

References · 6

• 🔥 https://exploit-db.com/exploits/39305 · Exploit
• https://freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1879 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1879 · Vendor Advisory
• http://securitytracker.com/id/1034673 · Note
• http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html · Note