Total vulnerabilities in the database
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
| Software | From | Fixed in |
|---|---|---|
| freebsd / freebsd | 5.4-releng | 5.4-releng.x |
| freebsd / freebsd | 5.3-release | 5.3-release.x |
| freebsd / freebsd | 5.3 | 5.3.x |
| freebsd / freebsd | 5.4-pre-release | 5.4-pre-release.x |
| freebsd / freebsd | 6.0-release | 6.0-release.x |
| freebsd / freebsd | 5.4-release | 5.4-release.x |
| freebsd / freebsd | 6.0-stable | 6.0-stable.x |
| freebsd / freebsd | 5.3-stable | 5.3-stable.x |
| freebsd / freebsd | 5.3-releng | 5.3-releng.x |