Remote DoS vulnerability in the FreeBSD IPv6 stack
A vulnerability (CVE-2019-5611) has been fixed in FreeBSD that allows the kernel to crash (packet-of-death) via specially fragmented ICMPv6 MLD (Multicast Listener Discovery) packets. The problem is caused by a lack of necessary checking in the m_pulldown() call, which can lead to the return of non-continuous mbuf chains, contrary to the caller's expectations. The vulnerability has been fixed in updates 12.0-RELEASE-p10, 11.3-RELEASE-p3, and 11.2-RELEASE-p14. As a workaround to protect, you can […]
