CVE-2023-3107

HIGH

FreeBSD - Denial of Service via IPv6 Fragment Reassembly Integer Overflow

Title source: llm
STIX 2.1

Description

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

References (2)

Core 2
Core References
Mitigation, Vendor Advisory vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-23:06.ipv6.asc

Scores

CVSS v3 7.5
EPSS 0.0016
EPSS Percentile 35.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (4)
freebsd/freebsd 12.4 (6 CPE variants)
freebsd/freebsd 13.1 (12 CPE variants)
freebsd/freebsd 13.2 (2 CPE variants)
netapp/clustered_data_ontap 9.0
Published Aug 01, 2023
Tracked Since Feb 18, 2026