{"api_version":"1","generated_at":"2026-07-23T04:49:20+00:00","cve":"CVE-2008-3530","urls":{"html":"https://cve.report/CVE-2008-3530","api":"https://cve.report/api/cve/CVE-2008-3530.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3530","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3530"},"summary":{"title":"CVE-2008-3530","description":"sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-09-05 16:08:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/0633","name":"http://www.vupen.com/english/advisories/2009/0633","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"inode/x-empty","httpstatus":"200","archivestatus":"200"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc","name":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021111","name":"http://www.securitytracker.com/id?1021111","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NetBSD ICMPv6 Processing Flaw Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","name":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2009-05-12 Security Update 2009-002 / Mac OS X v10.5.7","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31745","name":"http://secunia.com/advisories/31745","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"FreeBSD ICMPv6 \"Packet Too Big\" MTU Denial of Service Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT3549","name":"http://support.apple.com/kb/HT3549","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About the security content of Security Update 2009-002 / Mac OS X v10.5.7","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1020820","name":"http://www.securitytracker.com/id?1020820","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FreeBSD ICMPv6 Processing Flaw Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc","name":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2009/1297","name":"http://www.vupen.com/english/advisories/2009/1297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35074","name":"http://secunia.com/advisories/35074","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31004","name":"http://www.securityfocus.com/bid/31004","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"FreeBSD Malformed ICMPv6 Packet Remote Denial Of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","name":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA09-133A -- Apple Updates for Multiple Vulnerabilities","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32401","name":"http://secunia.com/advisories/32401","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NetBSD ICMPv6 \"Packet Too Big\" MTU Denial of Service Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT3467","name":"http://support.apple.com/kb/HT3467","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About the security content of Time Capsule and AirPort Base Station (802.11n*) Firmware 7.4.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3530","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3530","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3530","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3530","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3530","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:45:18.624Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"NetBSD-SA2008-015","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc"},{"name":"31745","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31745"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT3549"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT3467"},{"name":"FreeBSD-SA-08:09","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc"},{"name":"35074","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35074"},{"name":"APPLE-SA-2009-05-12","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"},{"name":"1021111","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021111"},{"name":"freebsd-icmp6mtudiscupdate-dos(44908)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908"},{"name":"31004","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31004"},{"name":"TA09-133A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html"},{"name":"ADV-2009-1297","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/1297"},{"name":"1020820","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1020820"},{"name":"32401","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32401"},{"name":"ADV-2009-0633","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/0633"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-09-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"NetBSD-SA2008-015","tags":["vendor-advisory","x_refsource_NETBSD"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc"},{"name":"31745","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31745"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT3549"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT3467"},{"name":"FreeBSD-SA-08:09","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc"},{"name":"35074","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35074"},{"name":"APPLE-SA-2009-05-12","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"},{"name":"1021111","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021111"},{"name":"freebsd-icmp6mtudiscupdate-dos(44908)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908"},{"name":"31004","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31004"},{"name":"TA09-133A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html"},{"name":"ADV-2009-1297","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/1297"},{"name":"1020820","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1020820"},{"name":"32401","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32401"},{"name":"ADV-2009-0633","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/0633"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-3530","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"NetBSD-SA2008-015","refsource":"NETBSD","url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc"},{"name":"31745","refsource":"SECUNIA","url":"http://secunia.com/advisories/31745"},{"name":"http://support.apple.com/kb/HT3549","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT3549"},{"name":"http://support.apple.com/kb/HT3467","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT3467"},{"name":"FreeBSD-SA-08:09","refsource":"FREEBSD","url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc"},{"name":"35074","refsource":"SECUNIA","url":"http://secunia.com/advisories/35074"},{"name":"APPLE-SA-2009-05-12","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"},{"name":"1021111","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021111"},{"name":"freebsd-icmp6mtudiscupdate-dos(44908)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908"},{"name":"31004","refsource":"BID","url":"http://www.securityfocus.com/bid/31004"},{"name":"TA09-133A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html"},{"name":"ADV-2009-1297","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/1297"},{"name":"1020820","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1020820"},{"name":"32401","refsource":"SECUNIA","url":"http://secunia.com/advisories/32401"},{"name":"ADV-2009-0633","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0633"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-3530","datePublished":"2008-09-05T16:00:00.000Z","dateReserved":"2008-08-07T00:00:00.000Z","dateUpdated":"2024-08-07T09:45:18.624Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-09-05 16:08:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3530","Ordinal":"1","Title":"CVE-2008-3530","CVE":"CVE-2008-3530","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3530","Ordinal":"1","NoteData":"sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.","Type":"Description","Title":"CVE-2008-3530"},{"CveYear":"2008","CveId":"3530","Ordinal":"2","NoteData":"2008-09-05","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3530","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}