PT-2002-1624 · Freebsd · Freebsd

Published 2002-07-03 · Updated 2024-01-26 · CVE-2002-0574

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.5 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically memory exhaustion, by sending ICMP echo packets. These packets trigger a bug in the ip output() function, where the reference count for a routing table entry is not decremented, preventing the entry from being removed.

Recommendations For FreeBSD versions 4.5 and earlier, consider restricting access to ICMP echo packets to minimize the risk of exploitation until a patch is available. As a temporary workaround, apply configuration changes to limit the impact of memory exhaustion, such as adjusting system parameters to reduce the memory allocation for routing table entries.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2002-0574

Affected Products

Freebsd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0574 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc · Vendor Advisory
• http://securityfocus.com/bid/4539 · Vendor Advisory
• http://iss.net/security_center/static/8893.php · Note
• http://osvdb.org/5232 · Note
• https://t.me/cvenotify/68942 · Telegram Post