CVE-2006-0054

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.

Score

CVSS 3.1 5.3 Medium

Status

Modified - secteam@freebsd.org

Published

2006-01-11

Last modified

2025-01-16

Weaknesses

CWE-824

Affected products

• Freebsd (Freebsd)

References

• http://secunia.com/advisories/18378
• http://securitytracker.com/id?1015477
• http://www.osvdb.org/22319
• http://www.securityfocus.com/bid/16209
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24073