NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability

Bugtraq ID:	31026
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2464
Remote:	Yes
Local:	No
Published:	Sep 04 2008 12:00AM
Updated:	Sep 05 2008 10:31PM
Credit:	Miikka Saukko, Ossi Herrala and Jukka Taimisto
Vulnerable:	NetBSD NetBSD Current NetBSD NetBSD 4.0
Not Vulnerable:

NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability

NetBSD is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

This issue affects the following:

NetBSD 4.0
NetBSD-current

NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability

To exploit this issue, attackers can use readily available packet generators.

NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability

Solution:
Fixes are available in the NetBSD CVS repository. Please see the references for more information.

NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability

References:

• NetBSD Homepage (NetBSD)
  
• Vulnerability Note VU#817940 NetBSD malformed ICMPv6 MLD-QUERY denial of service (US-CERT)