CVE-2015-1417: High severity freebsd kernel vulnerability

Published Jul 25, 2017

Updated

The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before 8.4-STABLE, 8.4-RELEASE-p35 on systems with VNET enabled and at least 16 VNET instances allows remote attackers to cause a denial of service (mbuf consumption) via multiple concurrent TCP connections.

Affected Software

56 affected components

FreeBSD FreeBSD=8.4

FreeBSD FreeBSD=8.4-beta1

FreeBSD FreeBSD=8.4-p11

FreeBSD FreeBSD=8.4-p12

FreeBSD FreeBSD=8.4-p13

FreeBSD FreeBSD=8.4-p14

FreeBSD FreeBSD=8.4-p15

FreeBSD FreeBSD=8.4-p16

FreeBSD FreeBSD=8.4-p17

FreeBSD FreeBSD=8.4-p19

FreeBSD FreeBSD=8.4-p2

FreeBSD FreeBSD=8.4-p20

FreeBSD FreeBSD=8.4-p21

FreeBSD FreeBSD=8.4-p22

FreeBSD FreeBSD=8.4-p23

FreeBSD FreeBSD=8.4-p24

FreeBSD FreeBSD=8.4-p26

FreeBSD FreeBSD=8.4-p27

FreeBSD FreeBSD=8.4-p3

FreeBSD FreeBSD=8.4-p30

FreeBSD FreeBSD=8.4-p33

FreeBSD FreeBSD=8.4-p34

FreeBSD FreeBSD=8.4-p4

FreeBSD FreeBSD=8.4-p7

FreeBSD FreeBSD=8.4-p8

FreeBSD FreeBSD=8.4-p9

FreeBSD FreeBSD=9.3

FreeBSD FreeBSD=9.3-p1

FreeBSD FreeBSD=9.3-p10

FreeBSD FreeBSD=9.3-p12

FreeBSD FreeBSD=9.3-p13

FreeBSD FreeBSD=9.3-p16

FreeBSD FreeBSD=9.3-p19

FreeBSD FreeBSD=9.3-p2

FreeBSD FreeBSD=9.3-p20

FreeBSD FreeBSD=9.3-p3

FreeBSD FreeBSD=9.3-p5

FreeBSD FreeBSD=9.3-p6

FreeBSD FreeBSD=9.3-p7

FreeBSD FreeBSD=9.3-p8

FreeBSD FreeBSD=9.3-p9

FreeBSD FreeBSD=10.1

FreeBSD FreeBSD=10.1-p1

FreeBSD FreeBSD=10.1-p10

FreeBSD FreeBSD=10.1-p12

FreeBSD FreeBSD=10.1-p15

FreeBSD FreeBSD=10.1-p16

FreeBSD FreeBSD=10.1-p2

FreeBSD FreeBSD=10.1-p3

FreeBSD FreeBSD=10.1-p4

FreeBSD FreeBSD=10.1-p5

FreeBSD FreeBSD=10.1-p6

FreeBSD FreeBSD=10.1-p7

FreeBSD FreeBSD=10.1-p8

FreeBSD FreeBSD=10.1-p9

FreeBSD FreeBSD=10.2

Event History

Jul 25, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1417?

The severity of CVE-2015-1417 is classified as high, as it allows remote attackers to cause a denial of service.

How do I fix CVE-2015-1417?

To fix CVE-2015-1417, users should upgrade their FreeBSD system to at least version 10.2-PRERELEASE or apply the relevant patches.

What versions of FreeBSD are affected by CVE-2015-1417?

CVE-2015-1417 affects FreeBSD versions 8.4, 9.3, and 10.1 before specific patch levels.

What impact does CVE-2015-1417 have on systems?

CVE-2015-1417 can lead to a denial of service, potentially impacting the availability of affected systems.

Is there a known exploit for CVE-2015-1417?

Yes, there are known exploits that take advantage of CVE-2015-1417, which can impact systems with VNET enabled.