CVE-2016-9555
CriticalSummary
The sctp_sf_ootb function in the Linux kernel before version 4.8.8 lacks chunk-length checking for the first chunk, allowing remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations, potentially leading to service outages and affecting the availability of applications using SCTP.
Recommendation
It is recommended to update the Linux kernel to version 4.8.8 or later to mitigate this vulnerability and implement additional monitoring mechanisms for SCTP traffic.
Original NVD description (English source)
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.