VULNERABILITY INTELLIGENCE

CVE-2009-0687

CVSS score7.8 NONE
EPSS probability9.52%
CISA KEVNot currently listed
Published2009-08-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.

Weakness classification

  • nvd@nist.gov: CWE-399

Primary references