Denial of Service Vulnerability in FreeBSD and NetBSD Neighbor Discovery Implementation
CVE-2011-2393

Currently unrated

Key Information:

Vendor

Netbsd

Status
Netbsd
FreeBSD
Vendor
CVE Published:
2 February 2012

What is CVE-2011-2393?

The Neighbor Discovery protocol within the IPv6 stack of FreeBSD and NetBSD is susceptible to a denial of service attack. Remote attackers can exploit this vulnerability by sending a multitude of Router Advertisement messages with varying source addresses, which may lead to excessive CPU consumption and potential device hangs. This attack is similar in nature to prior vulnerabilities documented in related advisories.

References

http://www.mh-sec.de/downloads/mh-RA_flooding_CVE-2010-mu...
x_refsource_MISC
http://seclists.org/fulldisclosure/2011/Apr/86
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.