CVE-2017-1081

Опубликовано: 10 апр. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.

Ссылки

http://www.securityfocus.com/bid/98089
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038369
Third Party Advisory
VDB Entry
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc
Vendor Advisory
http://www.securityfocus.com/bid/98089
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038369
Third Party Advisory
VDB Entry
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*

Версия до 11.0 (включая)

cpe:2.3:o:freebsd:freebsd:10.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:10.3:p19:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.0:p10:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.0221

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-416

CWE-20

Связанные уязвимости

CVE-2017-1081

CVSS3: 7.5

debian

почти 8 лет назад

In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3 ...

GHSA-vgpm-hvwj-9wc9

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 84%

0.0221

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-416

CWE-20