Total vulnerabilities in the database
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
| Software | From | Fixed in |
|---|---|---|
| openbsd / openbsd | 3.1 | 3.1.x |
| openbsd / openbsd | 3.3 | 3.3.x |
| openbsd / openbsd | 3.2 | 3.2.x |
| openbsd / openbsd | 3.0 | 3.0.x |
| openbsd / openbsd | 3.4 | 3.4.x |