Lucene search
HistorySep 11, 2008 - 9:06 p.m.
CVE-2008-3584
cve-2008-3584
netbsd
pppoe
denial of service
system crash
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafted PPPoE packet.
Affected configurations
Node
netbsdnetbsdMatch3.0
ORnetbsdnetbsdMatch3.1
ORnetbsdnetbsdMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbsd:netbsd | netbsd | eq | 3.0 |
| netbsd:netbsd | netbsd | eq | 3.1 |
| netbsd:netbsd | netbsd | eq | 4.0 |
References
Social References
More
Related
nvd
nvd
CVE-2008-3584
2008-09-11 21:06:44
prion
prion
Design/Logic Flaw
2008-09-11 21:06:00
cvelist
cvelist
CVE-2008-3584
2008-09-11 14:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
Related for CVE-2008-3584