MNBSD-2015-14: SCTP ICMPv6 input validation kernel panic

Description

A lack of proper input checks in the ICMPv6 processing of the SCTP stack could lead to either a failed kernel assertion or a NULL pointer dereference. In either case a kernel panic follows, allowing a remote attacker to cause a denial of service.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc
• https://www.cve.org/CVERecord?id=CVE-2016-1879

Additional Information

Aliases: CVE-2016-1879

Published: October 01, 2015
Last Modified: October 01, 2015