CVE-2015-2923

Published: Feb 20, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

Affected (1)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Before 10.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://openwall.com/lists/oss-security/2015/04/04/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6fd99094de2b83d1d4c8457f2c83483b2828e75a

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.freebsd.org/pipermail/freebsd-net/2015-April/041934.html

Source: cve@mitre.org

Mailing ListVendor Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-15:09.ipv6.asc

Source: cve@mitre.org

MitigationVendor Advisory

http://openwall.com/lists/oss-security/2015/04/04/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6fd99094de2b83d1d4c8457f2c83483b2828e75a

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.freebsd.org/pipermail/freebsd-net/2015-April/041934.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-15:09.ipv6.asc

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.