CVE-2023-3107

published 2023-08-01

CVE-2023-3107: A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
freebsd	freebsd	—	—
freebsd	freebsd	—	—
freebsd	freebsd	—	—
freebsd	freebsd	>= 12.4-RELEASE < 12.4-RELEASE-p4	12.4-RELEASE-p4
freebsd	freebsd	>= 13.1-RELEASE < 13.1-RELEASE-p9	13.1-RELEASE-p9
freebsd	freebsd	>= 13.2-RELEASE < 13.2-RELEASE-p2	13.2-RELEASE-p2
netapp	clustered_data_ontap	—	—

CWE-190