CVE-2015-5674

Published: Feb 5, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17 allows remote authenticated users to cause a denial of service (assertion failure and daemon exit) via a query from a network that is not directly connected.

Affected (3)

Products: Freebsd: Freebsd

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.1
Freebsd Freebsd	Version 10.2
Freebsd Freebsd	Version 9.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.securityfocus.com/bid/76244

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033185

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.freebsd.org/security/advisories/FreeBSD-SA-15:19.routed.asc

Source: cve@mitre.org

MitigationVendor Advisory

http://www.securityfocus.com/bid/76244

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033185

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.freebsd.org/security/advisories/FreeBSD-SA-15:19.routed.asc

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.