CVE-2009-0687: Null Pointer Dereference
The pftestrule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0687?
CVE-2009-0687 is classified as a high severity vulnerability due to its potential to cause denial of service by exploiting a NULL pointer dereference.
What systems are affected by CVE-2009-0687?
CVE-2009-0687 affects OpenBSD versions 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current.
How do I fix CVE-2009-0687?
To fix CVE-2009-0687, upgrade to a patched version of OpenBSD, NetBSD, MirOS, or MidnightBSD that addresses this vulnerability.
What type of attack does CVE-2009-0687 enable?
CVE-2009-0687 enables remote attackers to launch a denial of service attack via crafted IP packets.
When was CVE-2009-0687 discovered?
CVE-2009-0687 was disclosed in 2009, highlighting a significant vulnerability in the OpenBSD Packet Filter.