The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2017 | Nov 27, 2016 |
| Debian | — | Upgrade linux | Mar 31, 2017 | Nov 27, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade perf | Nov 30, 2017 | Nov 27, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 9, 2016 | Oct 25, 2016 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jan 19, 2017 | Nov 27, 2016 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Dec 9, 2016 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-108-powerpc-smpUpgrade linux-image-4.8.0-32-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-omapUpgrade linux-image-4.8.0-32-powerpc-e500mcUpgrade linux-image-4.8.0-1021-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-121-omapUpgrade linux-image-4.8.0-32-lowlatencyUpgrade linux-image-3.2.0-121-virtualUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-108-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.8.0-32-powerpc64-embUpgrade linux-image-4.4.0-57-generic-lpaeUpgrade linux-image-3.2.0-1499-omap4Upgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-3.2.0-121-genericUpgrade linux-image-3.2.0-121-generic-paeUpgrade linux-image-3.13.0-108-powerpc64-embUpgrade linux-image-4.8.0-32-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-3.13.0-108-powerpc-e500mcUpgrade linux-image-3.2.0-121-highbankUpgrade linux-image-genericUpgrade linux-image-generic-paeUpgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-32-powerpc-smpUpgrade linux-image-4.4.0-57-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-108-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-57-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-omap4Upgrade linux-image-4.4.0-57-powerpc64-embUpgrade linux-image-4.4.0-57-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-3.2.0-121-powerpc-smpUpgrade linux-image-4.4.0-57-powerpc-e500mcUpgrade linux-image-3.13.0-108-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-108-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-highbankUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-3.2.0-121-powerpc64-smpUpgrade linux-image-4.4.0-57-powerpc64-smpUpgrade linux-image-3.13.0-108-powerpc64-smpUpgrade linux-image-powerpc64-smp | Dec 21, 2016 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub