The results of fuzzing tests of the ping utility from OpenBSD have been published, conducted following the recent discovery of a remotely exploitable vulnerability in the ping utility provided with FreeBSD. The version of ping used in OpenBSD is not affected by the issue found in FreeBSD (the vulnerability exists in the new implementation of the pr_pack() function, rewritten by FreeBSD developers in 2019), but during the review, another bug was uncovered that had gone unnoticed for 24 years. This bug leads to an infinite loop when processing a response with a zero-length option field in the IP packet. The fix has already been included in OpenBSD. The issue is not considered a vulnerability, as the network stack in the OpenBSD kernel does not allow such packets into user space.
Source: opennet.ru
