CVE-2017-1081: Input Validation
Published Apr 10, 2018
·Updated
In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.
Affected Software
4 affected components
FreeBSD FreeBSD<=11.0
FreeBSD FreeBSD=10.3
FreeBSD FreeBSD=10.3-p19
FreeBSD FreeBSD=11.0-p10
Event History
Apr 10, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1081?
CVE-2017-1081 is classified as a critical severity vulnerability due to its potential to cause kernel panic.
2
How do I fix CVE-2017-1081?
To fix CVE-2017-1081, upgrade to FreeBSD version 11.0-STABLE, 11.0-RELEASE-p10, or 10.3-RELEASE-p19 or later.
3
What are the affected versions for CVE-2017-1081?
Affected versions for CVE-2017-1081 include FreeBSD versions before 11.0, 10.3, and specific patched versions of both.
4
What type of vulnerability is CVE-2017-1081?
CVE-2017-1081 is a memory handling vulnerability that can trigger a kernel panic.
5
Is CVE-2017-1081 exploitable remotely?
Yes, CVE-2017-1081 can be exploited remotely through specially crafted packet fragments.