CVE-2011-2393: High severity freebsd kernel vulnerability
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, a similar vulnerability to CVE-2010-4670.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2393?
CVE-2011-2393 is considered a vulnerability that can lead to denial of service due to excessive Router Advertisement messages.
How can I mitigate CVE-2011-2393?
Mitigation for CVE-2011-2393 involves configuring firewall rules to limit the rate of incoming Router Advertisement messages.
Which systems are affected by CVE-2011-2393?
CVE-2011-2393 affects FreeBSD, NetBSD, and potentially other BSD-based operating systems.
What kind of attack is exploited by CVE-2011-2393?
CVE-2011-2393 is exploited through a denial of service attack, specifically CPU consumption and device hang.
Is CVE-2011-2393 being actively exploited?
While there have been reports of exploitation attempts for CVE-2011-2393, the current active exploitation status may vary.