PT-2008-4914 · Netbsd Foundation+1 · Netbsd+1

Bjoern A. Zeeb + 1 · Publicado 2008-09-05 · Atualizado 2017-08-08 · CVE-2008-3530

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 6.3 through 7.1 NetBSD versions 3.0 through 4.0

Description The issue is related to the improper checking of the proposed new MTU in an ICMPv6 Packet Too Big Message. This allows remote attackers to cause a denial of service, resulting in a system panic, via a crafted Packet Too Big Message.

Recommendations For FreeBSD versions 6.3 through 7.1, update to a version that properly checks the proposed new MTU in an ICMPv6 Packet Too Big Message. For NetBSD versions 3.0 through 4.0, update to a version that properly checks the proposed new MTU in an ICMPv6 Packet Too Big Message.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-3530

Produtos afetados

Freebsd

Netbsd

Referências · 16

• http://vupen.com/english/advisories/2009/1297 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3530 · Nota de Segurança
• http://securitytracker.com/id?1021111 · Nota
• http://support.apple.com/kb/HT3467 · Nota
• http://securityfocus.com/bid/31004 · Correção
• http://secunia.com/advisories/32401 · Nota
• http://vupen.com/english/advisories/2009/0633 · Nota
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html · Aviso do Fabricante
• http://securitytracker.com/id?1020820 · Nota
• http://secunia.com/advisories/35074 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44908 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc · Aviso do Fabricante
• http://secunia.com/advisories/31745 · Aviso do Fabricante
• http://support.apple.com/kb/HT3549 · Nota
• http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc · Correção, Aviso do Fabricante