CVE-2023-3107: Remote denial of service in IPv6 fragment reassembly

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-01 · updated 2026-06-17
Weakness: CWE-190

Description

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

Affected products

FreeBSD: 12.4, 12.4-p1, 12.4-p2, 12.4-p3, 12.4-rc2-p1, 12.4-rc2-p2 (+14)
Clustered Data ONTAP: 9.0

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-23:06.ipv6.asc
https://security.netapp.com/advisory/ntap-20230804-0001/
https://security.FreeBSD.org/advisories/FreeBSD-SA-23:06.ipv6.asc
https://security.netapp.com/advisory/ntap-20230804-0001/

Get alerted when CVE-2023-3107 or the next vulnerability affects your stack