CVE-2016-1879

Related Files

FreeBSD SCTP ICMPv6 Denial Of Service

Posted Jan 25, 2016

Site ptsecurity.com

FreeBSD suffers from an SCTP ICMPv6 error processing denial of service vulnerability.

tags | exploit, denial of service

systems | freebsd, bsd

advisories | CVE-2016-1879

SHA-256 | 0e9739e6af079dbf01619289a6322ec59c79b437390fcdb866cdc2f4a91789c1

Download | Favorite | View

FreeBSD Security Advisory - FreeBSD-SA-16:01.sctp

Posted Jan 15, 2016

Authored by Jonathan T. Looney

FreeBSD Security Advisory - A lack of proper input checks in the ICMPv6 processing in the SCTP stack can lead to either a failed kernel assertion or to a NULL pointer dereference. In either case, a kernel panic will follow. A remote, unauthenticated attacker can reliably trigger a kernel panic in a vulnerable system running IPv6. Any kernel compiled with both IPv6 and SCTP support is vulnerable. There is no requirement to have an SCTP socket open. IPv4 ICMP processing is not impacted by this vulnerability.

tags | advisory, remote, kernel

systems | freebsd

advisories | CVE-2016-1879

SHA-256 | 4bef6e3ea2f1171573414a2017dc744185b0cd4dec11a97cd0033f86aae1bbe0

Download | Favorite | View