Description
Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial of service (crash) via a crafted IGMP packet, which triggers an incorrect size calculation and allocation of insufficient memory.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | kfreebsd-9 | 9.0-10+deb70.9 | DSA-3175-2, DSA-3175-1 |
Advisories 2
- DSA-3175-1 kfreebsd-9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3175-2 kfreebsd-9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-3175 vendor-advisory
- 72777 vdb-entry
- FreeBSD-SA-15:04 vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10107
- 1031798 vdb-entry
- https://www.pfsense.org/security/advisories/pfSense-SA-15_02.igmp.asc