CVE-2023-3107 Remote denial of service in IPv6 fragment reassembly
Remote attackers can cause a kernel panic and denial of service in FreeBSD by sending crafted IPv6 packets that trigger an integer overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-3107?
CVE-2023-3107 is a high-severity vulnerability in Freebsd Freebsd, published on 1 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.
Weakness: CWE-190
Which versions are affected by CVE-2023-3107?
It affects 2 products.
Products include Freebsd Freebsd, Netapp Clustered Data Ontap.
How do I fix CVE-2023-3107?
No fix has been published for CVE-2023-3107 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-3107 being exploited?
There is no known exploitation of CVE-2023-3107 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-cx46-mm2w-4mwv.