High severity · published Jan 29, 2016
CVE-2016-1879
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote…
7.5
CVSS
13.3%
EPSS
No
On KEV
Description
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)13.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
9.3; 10.1; 10.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1879
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1879
packetstormsecurity.com
http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
www.securitytracker.com
http://www.securitytracker.com/id/1034673
www.exploit-db.com
https://www.exploit-db.com/exploits/39305/
Vendor Advisory
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc
More from Freebsd
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)