CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
68.2%
The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required “PKTHDR” mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.
Vendor | Product | Version | CPE |
---|---|---|---|
netbsd | netbsd | 1.5 | cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.1 | cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.2 | cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.3 | cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:* |
netbsd | netbsd | 1.6 | cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:* |
netbsd | netbsd | 1.6.1 | cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:* |