7.8

CVE-2009-0687

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.

Data is provided by the National Vulnerability Database (NVD)
Midnightbsd ≫ Midnightbsd Version0.3-current
Mirbsd ≫ Miros Version <= 10
Netbsd ≫ Netbsd Version5.0
Openbsd ≫ Openbsd Version4.2
Openbsd ≫ Openbsd Version4.3
Openbsd ≫ Openbsd Version4.4
Openbsd ≫ Openbsd Version4.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.33% 0.932
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C