Back to search
CVE-2006-0381
Published: Jan 25, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
16375
vdb-entry
x_refsource_BID
1015542
vdb-entry
x_refsource_SECTRACK
18609
third-party-advisory
x_refsource_SECUNIA
bsd-pf-fragment-dos(24337)
vdb-entry
x_refsource_XF
22732
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now