high7.5Public exploit code
CVE-2016-1879
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD SCTP ICMPv6 - Error Processing2016-01-25 · dos · freebsd
Impact
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Versions 9.3, 10.1, 10.2 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
- http://www.securitytracker.com/id/1034673
- https://www.exploit-db.com/exploits/39305/
- https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc
- http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
- http://www.securitytracker.com/id/1034673
- https://www.exploit-db.com/exploits/39305/
- https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc