Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

CVE-2015-1417

Severity CVSS v4.0:
Pending analysis
Type:
CWE-400 Uncontrolled Resource Consumption ('Resource Exhaustion')
Publication date:
25/07/2017
Last modified:
20/04/2025

Description

The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before 8.4-STABLE, 8.4-RELEASE-p35 on systems with VNET enabled and at least 16 VNET instances allows remote attackers to cause a denial of service (mbuf consumption) via multiple concurrent TCP connections.

Impact

Vector 3.x
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS v3.1 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): None
Integrity (I): None
Availability (A): High

Base Score 3.x
7.50
Severity 3.x
HIGH
Vector 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P CVSS v2.0 Severity and Metrics:

Base Score: 5.00 MEDIUM
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): None
Availability (A): Physical

Base Score 2.0
5.00
Severity 2.0
MEDIUM

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:freebsd:freebsd:8.4:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:beta1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p11:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p13:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p14:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p15:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p16:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p17:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p19:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p20:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p21:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p22:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:8.4:p23:*:*:*:*:*:*

To consult the complete list of CPE names with products and versions, see this page


References to Advisories, Solutions, and Tools