Unrated severityNVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026

CVE-2008-2464

Description

The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kame/Kame
cpe:2.3:a:kame:kame:*:*:*:*:*:*:*:*
FreeBSD/FreeBSD
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
NetBSD/NetBSD
cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*
FreeBSD/kernelllm-fuzzy
NetBSD/kernelllm-fuzzy
Range: 4.0

Patches

Vulnerability mechanics

References

cert.fi/haavoittuvuudet/2008/advisory-netbsd.htmlnvdExploit
www.kb.cert.org/vuls/id/817940nvdUS Government Resource
cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.cnvd
cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diffnvd
ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-011.txt.ascnvd
securitytracker.com/idnvd
www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.cnvd
www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diffnvd
www.securityfocus.com/bid/31026nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000