Stack Consumption Vulnerabilities in NetBSD When IPsec is Enabled
CVE-2011-1547

Currently unrated

Key Information:

Vendor

Netbsd

Status
Vendor
CVE Published:
9 May 2011

What is CVE-2011-1547?

Multiple stack consumption vulnerabilities exist in the NetBSD kernel related to IPsec functionality. When IPsec is enabled, remote attackers can exploit these vulnerabilities by sending carefully crafted IPv4 or IPv6 packets containing nested IPComp headers. This can lead to denial of service situations such as memory corruption or kernel panic, potentially affecting system availability. It is crucial for users of affected NetBSD versions to patch their systems to mitigate these vulnerabilities.

References

EPSS Score

38% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.