Vulnerability in Openbsd

CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.

EPSS: 0.014 (69.9th percentile) — read the EPSS interpretation.

Affected products

Openbsd — versions 3.2, 3.3, 3.4
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, Patch, x_refsource_OPENBSD, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)