PT-2006-1500 · Freebsd · Freebsd

Scott Wood · Published 2006-02-02 · Updated 2017-07-20 · CVE-2006-0433

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.3 through 5.4

Description The issue is related to the Selective Acknowledgement (SACK) in FreeBSD, which does not properly handle an incoming selective acknowledgement when there is insufficient memory. This might allow remote attackers to cause a denial of service, resulting in an infinite loop.

Recommendations For versions 5.3 and 5.4, consider applying a patch or updating to a newer version that addresses the SACK handling issue to prevent potential denial of service attacks.

Fix

Related Identifiers

CVE-2006-0433

Affected Products

Freebsd

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-0433 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc · Vendor Advisory
• http://osvdb.org/22861 · Patch
• http://securitytracker.com/id?1015566 · Note
• http://vupen.com/english/advisories/2006/0409 · Note
• http://securityfocus.com/bid/16466 · Note
• http://securityreason.com/securityalert/399 · Note
• http://secunia.com/advisories/18696 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24453 · Note