PT-2001-1893 · Freebsd+1 · Freebsd+1

Published 2001-09-20 · Updated 2017-10-10 · CVE-2001-0710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.5 and earlier FreeBSD versions 4.3 and earlier

Description: The issue allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.

Recommendations: For NetBSD versions 1.5 and earlier, consider implementing measures to limit the number of IP fragments accepted by the machine to prevent mbuf pool exhaustion. For FreeBSD versions 4.3 and earlier, consider implementing measures to limit the number of IP fragments accepted by the machine to prevent mbuf pool exhaustion.

Exploit

Fix

Related Identifiers

CVE-2001-0710

Affected Products

Freebsd

Netbsd

References · 5

• 🔥 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:52.fragment.asc · Exploit
• http://securityfocus.com/bid/2799 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0710 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-006.txt.asc · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6636 · Note