CVE-2006-0381
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/01/2006
Last modified:
03/04/2025
Description
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:* | ||
cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc
- http://secunia.com/advisories/18609
- http://securitytracker.com/id?1015542=
- http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104
- http://www.osvdb.org/22732
- http://www.securityfocus.com/bid/16375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24337
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc
- http://secunia.com/advisories/18609
- http://securitytracker.com/id?1015542=
- http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104
- http://www.osvdb.org/22732
- http://www.securityfocus.com/bid/16375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24337