CVE-2016-1879

EPSS 19.79%
Published 29.01.2016 19:59:07
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Freebsd ≫ Freebsd Version9.3

Freebsd ≫ Freebsd Version10.1

Freebsd ≫ Freebsd Version10.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	19.79%	0.952

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html

http://www.securitytracker.com/id/1034673

https://www.exploit-db.com/exploits/39305/

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1879

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1879

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1879

EUVD