PT-2006-1500 · Freebsd · Freebsd

Scott Wood · Publicado 2006-02-02 · Atualizado 2017-07-20 · CVE-2006-0433

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.3 through 5.4

Description The issue is related to the Selective Acknowledgement (SACK) in FreeBSD, which does not properly handle an incoming selective acknowledgement when there is insufficient memory. This might allow remote attackers to cause a denial of service, resulting in an infinite loop.

Recommendations For versions 5.3 and 5.4, consider applying a patch or updating to a newer version that addresses the SACK handling issue to prevent potential denial of service attacks.

Correção

Identificadores relacionados

CVE-2006-0433

Produtos afetados

Freebsd

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-0433 · Nota de Segurança
• http://securitytracker.com/id?1015566 · Nota
• http://vupen.com/english/advisories/2006/0409 · Nota
• http://securityfocus.com/bid/16466 · Nota
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc · Aviso do Fabricante
• http://osvdb.org/22861 · Correção
• http://securityreason.com/securityalert/399 · Nota
• http://secunia.com/advisories/18696 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24453 · Nota