The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2017 | Nov 27, 2016 |
| Debian | — | Upgrade linux | Mar 31, 2017 | Nov 27, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Nov 27, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 9, 2016 | Oct 25, 2016 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 19, 2017 | Nov 27, 2016 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-docs | Dec 9, 2016 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-57-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-3.13.0-108-powerpc-e500Upgrade linux-image-highbankUpgrade linux-image-4.4.0-57-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-121-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-108-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-omap4Upgrade linux-image-3.13.0-108-powerpc64-smpUpgrade linux-image-3.2.0-121-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-57-powerpc-e500mcUpgrade linux-image-3.13.0-108-generic-lpaeUpgrade linux-image-4.4.0-57-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-57-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.8.0-32-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-4.8.0-32-powerpc-e500mcUpgrade linux-image-3.2.0-121-virtualUpgrade linux-image-3.2.0-121-highbankUpgrade linux-image-3.13.0-108-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-108-powerpc-e500mcUpgrade linux-image-3.13.0-108-powerpc64-embUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-4.8.0-32-generic-lpaeUpgrade linux-image-omapUpgrade linux-image-3.2.0-1499-omap4Upgrade linux-image-4.8.0-32-powerpc-smpUpgrade linux-image-3.2.0-121-genericUpgrade linux-image-4.4.0-57-lowlatencyUpgrade linux-image-4.4.0-57-generic-lpaeUpgrade linux-image-4.8.0-32-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-108-powerpc-smpUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-32-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.2.0-121-generic-paeUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-121-omap | Dec 21, 2016 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub