Unrated severityNVD Advisory· Published Jan 25, 2006· Updated Jun 16, 2026
CVE-2006-0381
CVE-2006-0381
Description
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
Affected products
11cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.ascnvdPatch
- secunia.com/advisories/18609nvdPatchVendor Advisory
- ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.ascnvd
- securitytracker.com/idnvd
- www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diffnvd
- www.osvdb.org/22732nvd
- www.securityfocus.com/bid/16375nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24337nvd
News mentions
0No linked articles in our index yet.