Description
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.
References
- openbsd-icmp-echo-dos(17129) vdb-entry
- 20040826 028: RELIABILITY FIX: August 26, 2004 vendor-advisory
- 20040825 Vulnerability: OpenBSD 3.5 Kernel Panic. mailing-list