CVE-2006-0381

Published Jan 25, 2006

Last updated 7 years ago

Overview

Description: A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
Source: secteam@freebsd.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A94132F-4C47-49CC-B03C-8756613E9A38"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C89129C5-A1DB-4018-B43A-C60C8E650080"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References