Vulnerability Details CVE-2023-3107
A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.8%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-3107
-
cpe:2.3:a:netapp:clustered_data_ontap:9.0
-
cpe:2.3:o:freebsd:freebsd:12.4
-
cpe:2.3:o:freebsd:freebsd:13.1
-
cpe:2.3:o:freebsd:freebsd:13.2