CVE-2008-3584 NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafte...
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafted PPPoE packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netbsd | = 3.0 | No fix listed |
| netbsd | = 3.1 | No fix listed |
| netbsd | = 4.0 | No fix listed |
References
- 31597 third-party-advisory vendor-advisory
- support.apple.com
- 30838 vdb-entry
- 1020749 vdb-entry
- ADV-2009-0633 vdb-entry
- netbsd-pppoe-dos(44679) vdb-entry