NVD

Id
2378  
Name
CVE-2008-2464  
Description
The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2008-09-11  
Seq
2008-2464  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15201 2378 CVE-2008-2464 http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html  View
15202 2378 CVE-2008-2464 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c  View
15203 2378 CVE-2008-2464 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h  View
15204 2378 CVE-2008-2464 NetBSD-SA2008-011  View
15205 2378 CVE-2008-2464 1020822  View
15206 2378 CVE-2008-2464 http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c  View
15207 2378 CVE-2008-2464 http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.34;r2=1.35;f=h  View
15208 2378 CVE-2008-2464 VU#817940  View
15209 2378 CVE-2008-2464 31026  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46365 JVNDB-2008-001675 NetBSD の MLD query パケット処理にサービス運用妨害(DoS)の脆弱性 NetBSD には細工された ICMPv6 MLD query パケットを適切に処理できない脆弱性があります。結果として、システムパニックを起こす可能性があります。 CVE-2008-2464 32577 CVE-2008-2464 2378 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001675.html 2008-09-09 2008-10-24 View