CVE-2016-1879

Published: Jan 29, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.

Affected (3)

Products: Freebsd: Freebsd

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.1
Freebsd Freebsd	Version 10.2
Freebsd Freebsd	Version 9.3

References (8)

http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html

Source: cve@mitre.org

http://www.securitytracker.com/id/1034673

Source: cve@mitre.org

https://www.exploit-db.com/exploits/39305/

Source: cve@mitre.org

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1034673

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/39305/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.