FreeBSD畸形ICMPv6报文远程拒绝服务漏洞

BUGTRAQ ID: 31004 CVE ID：CVE-2008-3530 CNCVE ID：CNCVE-20083530 FreeBSD是一款开放源代码的操作系统。 FreeBSD处理ICMPv6 'Packet Too Big Message'报文存在问题，远程攻击者可以利用漏洞使内核的TCP堆栈出现panic，造成拒绝服务攻击。 针对入站的ICMPv6 'Packet Too Big Message'报文，在针对为到目的路径拟议新MTU时缺少充分检查。当内核配置为能处理IPv6报文，并激活IPv6 TCP套接字时，特殊构建的ICMPv6 'Packet Too Big...

CVE-2008-3530: Improper Input Validation

sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service panic via a crafted Packet Too B...

FreeBSD Security Advisory (FreeBSD-SA-08:09.icmp6.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:09.icmp6.asc ADV FreeBSD-SA-08:09.icmp6.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-08:09.icmp6.asc Authors: Thomas Reinke Copyright: Copyright c 2008 E-So...

FreeBSD Security Advisory (FreeBSD-SA-08:09.icmp6.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:09.icmp6.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD-SA-08:09.icmp6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:09.icmp6 Security Advisory The FreeBSD Project Topic: Remote kernel panics on IPv6 connections Category: core Module: sysnetinet6 Announced: 2008-09-03 Credits...