Executive Summary
| Summary | |
|---|---|
| Title | kfreebsd-9 security update |
| Informations | |||
|---|---|---|---|
| Name | DSA-3175 | First vendor Publication | 2015-02-25 |
| Vendor | Debian | Last vendor Modification | 2015-05-18 |
| Severity (Vendor) | N/A | Revision | 2 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.8 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| It was discovered that by sending crafted Router Advertisement packets, an attacker on the local network could lower the Current Hop Limit and cause the system to lose the ability to communicate with another IPv6 node on a different network. Additionally, it was discovered that the patch applied to kfreebsd-9 in DSA-3175-1 for CVE-2015-1414 was incomplete. For reference the original advisory text follows: Mateusz Kocielski and Marek Kroemeke discovered that an integer overflow in IGMP processing may result in denial of service through malformed IGMP packets. For the oldstable distribution (wheezy), these problems have been fixed in version 9.0-10+deb70.10. We recommend that you upgrade your kfreebsd-9 packages. |
Original Source
| Url : http://www.debian.org/security/2015/dsa-3175 |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2016-08-12 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_0afe8b29600a11e6a6c314dae9d210b8.nasl - Type : ACT_GATHER_INFO |
| 2015-05-20 | Name : The remote host is affected by a denial of service vulnerability. File : mcafee_firewall_enterprise_SB10107.nasl - Type : ACT_GATHER_INFO |
| 2015-02-27 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3175.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2015-05-19 00:24:53 |
|
| 2015-03-03 00:25:57 |
|
| 2015-02-28 13:24:17 |
|
| 2015-02-27 21:28:21 |
|
| 2015-02-26 00:36:25 |
|
