CVE-2016-9555
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 10.02% probability · 96th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- linux/linux kernel
- Source
- cve@mitre.org
EPSS 10.0% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6Issue Tracking, Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0086.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0091.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0113.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0307.htmlThird Party Advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8Release Notes, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2016/11/22/18Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/94479Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037339Third Party Advisory, VDB Entry
- https://bto.bluecoat.com/security-advisory/sa134Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1397930Issue Tracking, Third Party Advisory
- https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6Issue Tracking, Patch, Third Party Advisory
- https://groups.google.com/forum/#%21topic/syzkaller/pAUcHsUJbjk
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6Issue Tracking, Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.htmlMailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.