CVE-2007-1365 Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this...
HighCVSS 10.0
EPSS 21.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD | = 3.9 | No fix listed |
| OpenBSD | = 4.0 | No fix listed |
References
- [source-changes] 20070226 CVS: cvs.openbsd.org: src mailing-list
- 24490 third-party-advisory vendor-advisory
- 1017735 vdb-entry
- www.coresecurity.com
- VU#986425 third-party-advisory us-government-resource
- [3.9] 020: SECURITY FIX: March 7, 2007 patch vendor-advisory
- [4.0] 010: SECURITY FIX: March 7, 2007 vendor-advisory
- 33050 vdb-entry
- 22901 vdb-entry
- 1017744 vdb-entry