CVE-2016-1879

High

Published: 29/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service via a crafted ICMPv6 packet.

Risk Assessment

Attackers can cause the operating system to crash, resulting in service availability disruption.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability.

Other vulnerabilities in Moduł SCTP w FreeBSD

CVE-2014-8613High
The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk.

Original NVD description (English source)

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.