CVE-2011-1547

Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

5.08% chance of exploitation in the next 30 days, 92th percentile

Published

2011-05-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/17097

References

• CVE Record
• NVD entry

Related

• CVE-2011-1546
• CVE-2011-1556
• CVE-2011-1525
• CVE-2011-1557
• CVE-2011-1524
• CVE-2011-1563