PT-2016-4910 · Freebsd · Freebsd

Jonathan T. Looney + 1 · Publicado 2016-01-14 · Atualizado 2016-03-02 · CVE-2016-1882

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p33 FreeBSD versions 10.1 before p26 FreeBSD versions 10.2 before p9

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel crash. This is achieved through vectors related to creating a TCP connection with the TCP MD5SIG and TCP NOOPT socket options.

Recommendations For FreeBSD version 9.3, update to p33 or later. For FreeBSD version 10.1, update to p26 or later. For FreeBSD version 10.2, update to p9 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2016-1882

FREEBSD-SA-16_05

Produtos afetados

Freebsd

Referências · 4

• https://security.freebsd.org/advisories/FreeBSD-SA-16:05.tcp.asc · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1882 · Nota de Segurança
• http://securitytracker.com/id/1034677 · Nota
• https://osv.dev/vulnerability/CVE-2016-1882 · Aviso do Fabricante