First published: Wed Jul 03 2002(Updated: )
Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
FreeBSD Kernel | <=4.5 | |
FreeBSD Kernel | =4.5-stable | |
FreeBSD Kernel | =4.5-release |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0574 has a moderate severity level as it can lead to denial of service through memory exhaustion.
To fix CVE-2002-0574, upgrade to FreeBSD version 4.6 or later where the memory leak issue in ip_output() has been resolved.
CVE-2002-0574 affects FreeBSD versions 4.5-stable, 4.5-release, and all earlier versions.
CVE-2002-0574 exploits a vulnerability that involves sending ICMP echo packets to cause a memory leak.
Exploiting CVE-2002-0574 can lead to a denial of service by exhausting the memory available for routing table entries.