PT-2015-5272 · Freebsd · Freebsd

22733Db72Ab3Ed94B5F8A1Ffcde850251Fe6F466 + 2 · Published 2015-02-25 · Updated 2019-05-30 · CVE-2015-1414

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 8.4 p24 FreeBSD versions 9.x prior to 9.3 p10 FreeBSD versions 10.0 prior to p18 FreeBSD versions 10.1 prior to p6

Description The issue is caused by an integer overflow that allows remote attackers to trigger a denial of service, resulting in a system crash. This is achieved by sending a crafted IGMP packet, which causes an incorrect size calculation and allocation of insufficient memory.

Recommendations For FreeBSD versions prior to 8.4 p24, update to version 8.4 p24 or later. For FreeBSD versions 9.x prior to 9.3 p10, update to version 9.3 p10 or later. For FreeBSD versions 10.0 prior to p18, update to version 10.0 p18 or later. For FreeBSD versions 10.1 prior to p6, update to version 10.1 p6 or later.

Fix

Related Identifiers

CVE-2015-1414

DSA-3175-1

DSA-3175-2

Affected Products

Freebsd

References · 15

• http://debian.org/security/2015/dsa-3175 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3175-2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1414 · Security Note
• https://osv.dev/vulnerability/DSA-3175-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/kfreebsd-9 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3175-2 · Vendor Advisory
• https://freebsd.org/security/advisories/FreeBSD-SA-15:04.igmp.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1414 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2923 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3175-1 · Vendor Advisory
• http://securityfocus.com/bid/72777 · Note
• https://packages.debian.org/src:kfreebsd-9 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10107 · Note
• https://pfsense.org/security/advisories/pfSense-SA-15_02.igmp.asc · Note
• http://securitytracker.com/id/1031798 · Note