EUVD-2008-2459

Malware in sbrugna...

Denial of service

The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...

CVE-2008-2464

The CVE-2008-2464 issue affects NetBSD 4.0, FreeBSD, and KAME kernels with INET6 enabled, where the mld_input function in sys/netinet6/mld6.c mishandles certain ICMPv6 MLD-QUERY Maximum-Response-Delay values. This can allow remote attackers on the local link to trigger a divide-by-zero error and ...

NetBSD malformed ICMPv6 MLD-QUERY denial of service

Overview NetBSD fails to properly handle ICMPv6 MLD query packets, which can allow a remote, unauthenticated attacker to cause a denial of service. Description ICMPv6, which is defined in RFC 4443, is a version of the ICMP protocol for IPv6. Multicast Listener Discovery MLD for IPv6, which is...