CVE-2015-5674

Опубликовано: 05 фев. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17 allows remote authenticated users to cause a denial of service (assertion failure and daemon exit) via a query from a network that is not directly connected.

Ссылки

http://www.securityfocus.com/bid/76244
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033185
Third Party Advisory
VDB Entry
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:19.routed.asc
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/76244
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033185
Third Party Advisory
VDB Entry
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:19.routed.asc
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:10.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00754

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-4cjm-fcj7-ch6h