CVE-2016-9555: Critical severity Linux Linux kernel vulnerability
A flaw was found in the Linux kernels implementation of sctp protocol in which a remote attacker can trigger an out of bounds read with an offset of up to 64kB. This may panic the machine with a page-fault and the out-of-bounds data does not seem to be returned to the remote attacker.
For this attack to be sucessful, the kernel needs to have both the SCTP protocol module loaded and a process listening as an SCTP server.
Upstream patch:
https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6
CVE assignment:
http://seclists.org/oss-sec/2016/q4/509
Other sources
The sctpsfootb function in net/sctp/smstatefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-108.155 - Upgrade
Upgrade
ubuntu/linux-lts-vividto a version that resolves this vulnerability.Fixed in 3.19.0-80.88~14.04.1 - Upgrade
Upgrade
ubuntu/linux-lts-xenialto a version that resolves this vulnerability.Fixed in 4.4.0-57.78~14.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 4.4.0-57.78 - Upgrade
Upgrade
ubuntu/linux-raspi2to a version that resolves this vulnerability.Fixed in 4.4.0-1038.45 - Upgrade
Upgrade
ubuntu/linux-snapdragonto a version that resolves this vulnerability.Fixed in 4.4.0-1042.46 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.8.8
Event History
Frequently Asked Questions
What is CVE-2016-9555?
CVE-2016-9555 is a vulnerability in the Linux kernel before version 4.8.8 that allows remote attackers to cause a denial of service or possibly have other impact via crafted SCTP data.
How severe is CVE-2016-9555?
CVE-2016-9555 has a severity level of medium.
What is the affected software for CVE-2016-9555?
The affected software for CVE-2016-9555 includes various versions of the Linux kernel.
How can I fix CVE-2016-9555?
To fix CVE-2016-9555, it is recommended to update to Linux kernel version 4.8.8 or later.
Where can I find more information about CVE-2016-9555?
You can find more information about CVE-2016-9555 on the Openwall website and the official Linux kernel repository.