CVE-2016-1879

EUVD-2016-2973
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
freebsdfreebsd
9.3
freebsdfreebsd
10.1
freebsdfreebsd
10.2
𝑥
= Vulnerable software versions
References
http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
http://www.securitytracker.com/id/1034673
https://www.exploit-db.com/exploits/39305/
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc
http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
http://www.securitytracker.com/id/1034673
https://www.exploit-db.com/exploits/39305/
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc