CVE-2016-1879

EPSS 19.79%
Veröffentlicht 29.01.2016 19:59:07
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Freebsd ≫ Freebsd Version9.3

Freebsd ≫ Freebsd Version10.1

Freebsd ≫ Freebsd Version10.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	19.79%	0.952

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html

http://www.securitytracker.com/id/1034673

https://www.exploit-db.com/exploits/39305/

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1879

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1879

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1879

EUVD