PT-2015-5272 · Freebsd · Freebsd

22733Db72Ab3Ed94B5F8A1Ffcde850251Fe6F466 + 2 · Publicado 2015-02-25 · Atualizado 2019-05-30 · CVE-2015-1414

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 8.4 p24 FreeBSD versions 9.x prior to 9.3 p10 FreeBSD versions 10.0 prior to p18 FreeBSD versions 10.1 prior to p6

Description The issue is caused by an integer overflow that allows remote attackers to trigger a denial of service, resulting in a system crash. This is achieved by sending a crafted IGMP packet, which causes an incorrect size calculation and allocation of insufficient memory.

Recommendations For FreeBSD versions prior to 8.4 p24, update to version 8.4 p24 or later. For FreeBSD versions 9.x prior to 9.3 p10, update to version 9.3 p10 or later. For FreeBSD versions 10.0 prior to p18, update to version 10.0 p18 or later. For FreeBSD versions 10.1 prior to p6, update to version 10.1 p6 or later.

Correção

Identificadores relacionados

CVE-2015-1414

DSA-3175-1

DSA-3175-2

Produtos afetados

Freebsd

Referências · 15

• http://securityfocus.com/bid/72777 · Nota
• http://debian.org/security/2015/dsa-3175 · Aviso do Fabricante
• https://packages.debian.org/src:kfreebsd-9 · Nota
• https://security-tracker.debian.org/tracker/DSA-3175-2 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10107 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-3175-1 · Aviso do Fabricante
• https://pfsense.org/security/advisories/pfSense-SA-15_02.igmp.asc · Nota
• https://security-tracker.debian.org/tracker/source-package/kfreebsd-9 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3175-2 · Aviso do Fabricante
• https://freebsd.org/security/advisories/FreeBSD-SA-15:04.igmp.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1414 · Nota de Segurança
• http://securitytracker.com/id/1031798 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2923 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DSA-3175-1 · Aviso do Fabricante