What’s Vulnerable › Vulnerabilities

CVE-2011-2393

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-02-02 · updated 2026-06-16
• Weakness: CWE-399

Description

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, a similar vulnerability to CVE-2010-4670.

Affected products

• FreeBSD: all versions
• Netbsd: all versions

References

• http://seclists.org/fulldisclosure/2011/Apr/86
• http://www.mh-sec.de/downloads/mh-RA_flooding_CVE-2010-multiple.txt
• http://seclists.org/fulldisclosure/2011/Apr/86
• http://www.mh-sec.de/downloads/mh-RA_flooding_CVE-2010-multiple.txt

Get alerted when CVE-2011-2393 or the next vulnerability affects your stack