Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-3107

Remote denial of service in IPv6 fragment reassembly

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
freebsd

Description

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeBSD FreeBSD

Default version status: unknown

  • 13.2-RELEASE to < 13.2-RELEASE-p2affected
  • 13.1-RELEASE to < 13.1-RELEASE-p9affected
  • 12.4-RELEASE to < 12.4-RELEASE-p4affected

References