PT-2001-1893 · Freebsd+1 · Freebsd+1

Publicado 2001-09-20 · Atualizado 2017-10-10 · CVE-2001-0710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.5 and earlier FreeBSD versions 4.3 and earlier

Description: The issue allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.

Recommendations: For NetBSD versions 1.5 and earlier, consider implementing measures to limit the number of IP fragments accepted by the machine to prevent mbuf pool exhaustion. For FreeBSD versions 4.3 and earlier, consider implementing measures to limit the number of IP fragments accepted by the machine to prevent mbuf pool exhaustion.

Exploit

Correção

Identificadores relacionados

CVE-2001-0710

Produtos afetados

Freebsd

Netbsd

Referências · 5

• 🔥 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:52.fragment.asc · Exploit
• http://securityfocus.com/bid/2799 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0710 · Nota de Segurança
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-006.txt.asc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6636 · Nota