Medium · 5.3 CVE-2006-0054 EUVD-2006-0062GHSA-jw6x-xphc-fgvr

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that m…

Published Jan 11, 2006 · Updated Jan 16, 2025 · Assigned by freebsd

Description

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.

References

22319 vdb-entry
16209 vdb-entry
18378 third-party-advisory
ipfw-icmp-fragment-dos(24073) vdb-entry
1015477 vdb-entry