Summary
Andrey Konovalov discovered that the SCTP implementation in the Linux
kernel improperly handled validation of incoming data. A remote attacker
could use this to cause a denial of service (system crash).
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux | 3.13.0-108.155 |
Vulnerabilities 1
-
Unscored —CVE-2016-9555 EPSS 10%
The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for t…
References
-
report
https://ubuntu.com/security/CVE-2016-9555