CVE-2017-1081

HIGH

FreeBSD < 11.0 - Denial of Service via IPFilter State Handling

Title source: llm

Description

In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038369

Vendor Advisory vendor-advisory x_refsource_freebsd

https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/98089

Scores

CVSS v3 7.5

EPSS 0.0221

EPSS Percentile 84.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20 CWE-416

Status published

Products (3)

freebsd/freebsd 10.3 (2 CPE variants)

freebsd/freebsd 11.0 p10

freebsd/freebsd < 11.0

Published Apr 10, 2018

Tracked Since Feb 18, 2026