CVE-2008-2464 The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and pani...
HighCVSS 7.1
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kame | All versions | No fix listed |
| freebsd | All versions | No fix listed |
| netbsd | = 4.0 | No fix listed |
References
- cert.fi exploit
- cvsweb.netbsd.org
- cvsweb.netbsd.org
- NetBSD-SA2008-011 vendor-advisory
- 1020822 vdb-entry
- www.freebsd.org
- www.freebsd.org
- VU#817940 third-party-advisory us-government-resource
- 31026 vdb-entry