CVE-2009-0687: midnightbsd Resource Management Errors
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2009-0687 is a high (CVSS 7.8) Resource Management Errors vulnerability in midnightbsd. EPSS estimates a 9.52% chance of exploitation in the next 30 days, higher than 95.4% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 11-08-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
9.52%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 9.52% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundMultiple Vendor - PF Null Pointer Dereference
Maturity: poc
OpenBSD 4.5 - IP datagram Null Pointer Deref Denial of Service
Maturity: poc
OpenBSD 4.5 - IP datagrams Remote Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Midnightbsd1 product
- midnightbsd0.3-current
Mirbsd1 product
- miros≤ 10
Netbsd1 product
- netbsdEOL5.0
Openbsd1 product
- openbsdEOL4.2 | 4.3 | 4.4 | 4.5
4 vendors · 4 products
References
11 links- ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.ascVendor AdvisoryX Refsource NETBSD