Vulnerability in Freebsd
CVE-2008-2464
The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.
EPSS: 0.024 (82.6th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (Exploit, x_refsource_MISC)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_NETBSD)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)