Vulnerability in Midnightbsd
CVE-2009-0687
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
EPSS: 0.095 (94.9th percentile) — read the EPSS interpretation.
Affected products
- Midnightbsd — versions 0.3-current
- Mirbsd Miros
- Netbsd — versions 5.0
- Openbsd — versions 4.2, 4.3, 4.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (vendor-advisory, Patch, x_refsource_OPENBSD, Vendor Advisory)
- cret@cert.org (vendor-advisory, x_refsource_NETBSD, Vendor Advisory)
- cret@cert.org (exploit, x_refsource_EXPLOIT-DB)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (x_refsource_MISC)
- cret@cert.org (mailing-list, x_refsource_BUGTRAQ)
- cret@cert.org (exploit, x_refsource_EXPLOIT-DB)
- cret@cert.org (vendor-advisory, Patch, x_refsource_OPENBSD, Vendor Advisory)
- cret@cert.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)