CVE-2004-0370
FreeBSD 5.2 - Kernel Memory Exposure and Denial of Service via IPv6 Socket Options
Title source: llmDescription
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15662
Various Sources vendor-advisory
x_refsource_freebsd
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/11233
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9992
Scores
EPSS
0.0012
EPSS Percentile
30.0%
Details
Status
published
Products (1)
freebsd/freebsd
5.2
Published
May 04, 2004
Tracked Since
Feb 18, 2026