CVE-2015-1417

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-25 · updated 2026-06-17
Weakness: CWE-400

Description

The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before 8.4-STABLE, 8.4-RELEASE-p35 on systems with VNET enabled and at least 16 VNET instances allows remote attackers to cause a denial of service (mbuf consumption) via multiple concurrent TCP connections.

Affected products

FreeBSD: 8.4, 8.4-beta1, 8.4-p11, 8.4-p12, 8.4-p13, 8.4-p14 (+50)

References

http://www.securityfocus.com/bid/76112
http://www.securitytracker.com/id/1033111
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:15.tcp.asc
http://www.securityfocus.com/bid/76112
http://www.securitytracker.com/id/1033111
https://www.freebsd.org/security/advisories/FreeBSD-SA-15:15.tcp.asc

Get alerted when CVE-2015-1417 or the next vulnerability affects your stack