Vulnerability in Netbsd

CVE-2003-0653

The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

Affected products

  • Netbsd — versions 1.5, 1.5.1, 1.5.2
  • N/a — versions n/a