CVE-2009-0687
No CVSS score yet. EPSS 9.5% chance of exploitation in the next 30 days.
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
- EPSS
- 9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- midnightbsd:midnightbsd
- mirbsd:miros
- netbsd:netbsd
- openbsd:openbsd
References
- ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc
- http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt
- http://www.openbsd.org/errata43.html#013_pf
- http://www.openbsd.org/errata44.html#013_pf