CVE-2002-0574

Published: Jul 3, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed.

Affected (1)

Products: Freebsd: Freebsd

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Up to 4.5

Related CWEs

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (8)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc (unsafe URL)

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://www.iss.net/security_center/static/8893.php

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/5232

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/4539

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchVendor Advisory

http://www.iss.net/security_center/static/8893.php

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.osvdb.org/5232

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/4539

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory

Timeline

No history available yet.