Lucene search

K
freebsdFreeBSD734233F4-6007-11E6-A6C3-14DAE9D210B8
HistoryOct 21, 2014 - 12:00 a.m.

FreeBSD -- routed(8) remote denial of service vulnerability

2014-10-2100:00:00
vuxml.freebsd.org
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

83.0%

Problem Description:
The input path in routed(8) will accept queries from any
source and attempt to answer them. However, the output path
assumes that the destination address for the response is
on a directly connected network.
Impact:
Upon receipt of a query from a source which is not on a
directly connected network, routed(8) will trigger an
assertion and terminate. The affected system’s routing table
will no longer be updated. If the affected system is a
router, its routes will eventually expire from other routers’
routing tables, and its networks will no longer be reachable
unless they are also connected to another router.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 10.0UNKNOWN
FreeBSDanynoarchfreebsd< 10.0_10UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

83.0%

Related for 734233F4-6007-11E6-A6C3-14DAE9D210B8