PT-2020-7826 · Freebsd · Freebsd

Dennis Ljungmark · Published 2015-05-18 · Updated 2020-02-28 · CVE-2015-2923

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: FreeBSD versions prior to 10.1

Description: The issue concerns the Neighbor Discovery protocol implementation in the IPv6 stack, allowing remote attackers to reconfigure a hop-limit setting via a small hop limit value in a Router Advertisement message.

Recommendations: For versions prior to 10.1, update to version 10.1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-2923

DSA-3175-2

Affected Products

Freebsd

References · 6

• https://lists.freebsd.org/pipermail/freebsd-net/2015-April/041934.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3175-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2923 · Security Note
• https://freebsd.org/security/advisories/FreeBSD-SA-15:09.ipv6.asc · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6fd99094de2b83d1d4c8457f2c83483b2828e75a · Patch
• http://openwall.com/lists/oss-security/2015/04/04/2 · Note