Vulnerability in Freebsd

CVE-2006-0433

Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).

EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 5.3, 5.4
N/a — versions n/a

References

secteam@freebsd.org (vdb-entry, x_refsource_VUPEN)
secteam@freebsd.org (x_refsource_OSVDB, Patch, vdb-entry)
secteam@freebsd.org (vdb-entry, x_refsource_BID)
secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
secteam@freebsd.org (x_refsource_SREASON, third-party-advisory)
secteam@freebsd.org (vdb-entry, x_refsource_XF)
secteam@freebsd.org (x_refsource_SECUNIA, third-party-advisory)