CVE-2015-1414

2015-02-2715:59:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

freebsd

cve-2015-1414

integer overflow

denial of service

igmp packet

memory allocation

nvd

6.1 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.029 Low

EPSS

Percentile

90.8%

JSON

Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial of service (crash) via a crafted IGMP packet, which triggers an incorrect size calculation and allocation of insufficient memory.

CPENameOperatorVersion
netgate:pfsensenetgate pfsenseeq2.2.1
debian:debian_linuxdebian debian linuxeq7.0
freebsd:freebsdfreebsdeq10.0
freebsd:freebsdfreebsdeq9.0
freebsd:freebsdfreebsdeq9.1
freebsd:freebsdfreebsdeq9.2
freebsd:freebsdfreebsdeq9.3
freebsd:freebsdfreebsdeq8.4
freebsd:freebsdfreebsdeq10.1

CPE	Name	Operator	Version
netgate:pfsense	netgate pfsense	eq	2.2.1
debian:debian_linux	debian debian linux	eq	7.0
freebsd:freebsd	freebsd	eq	10.0
freebsd:freebsd	freebsd	eq	9.0
freebsd:freebsd	freebsd	eq	9.1
freebsd:freebsd	freebsd	eq	9.2
freebsd:freebsd	freebsd	eq	9.3
freebsd:freebsd	freebsd	eq	8.4
freebsd:freebsd	freebsd	eq	10.1