CVE-2016-9555: Critical severity linux kernel vulnerability
A flaw was found in the Linux kernels implementation of sctp protocol in which a remote attacker can trigger an out of bounds read with an offset of up to 64kB. This may panic the machine with a page-fault and the out-of-bounds data does not seem to be returned to the remote attacker.
For this attack to be sucessful, the kernel needs to have both the SCTP protocol module loaded and a process listening as an SCTP server.
Upstream patch:
https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6
CVE assignment:
http://seclists.org/oss-sec/2016/q4/509
Other sources
The sctpsfootb function in net/sctp/smstatefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-9555?
CVE-2016-9555 is a vulnerability in the Linux kernel before version 4.8.8 that allows remote attackers to cause a denial of service or possibly have other impact via crafted SCTP data.
How severe is CVE-2016-9555?
CVE-2016-9555 has a severity level of medium.
What is the affected software for CVE-2016-9555?
The affected software for CVE-2016-9555 includes various versions of the Linux kernel.
How can I fix CVE-2016-9555?
To fix CVE-2016-9555, it is recommended to update to Linux kernel version 4.8.8 or later.
Where can I find more information about CVE-2016-9555?
You can find more information about CVE-2016-9555 on the Openwall website and the official Linux kernel repository.