Skip to content
OpenAdvisories
Unscored CVE-2017-1081 EUVD-2017-10097GHSA-vgpm-hvwj-9wc9

In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can…

Published Apr 10, 2018 · Updated Sep 16, 2024 · Assigned by freebsd

Vendor: FreeBSD Product: FreeBSD

Description

In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.

Affected products

VendorProductAffectedFixed
FreeBSD FreeBSD prior to 11.0-RELEASE-p10 and 10.3-RELEASE-p19 —

References