CVEvulnerability

CVE-2002-0574

5.0 MEDIUM Published 2002-07-03 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-07-03
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses: CWE-401

Description

Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed.

Affected configurations

• freebsd freebsd (<= 4.5)

Weakness · CWE (1)

CWE-401 Missing Release of Memory after Effective Lifetime weakness

Referenced by CWE · observed example (2)

CWE-401 Missing Release of Memory after Effective Lifetime weakness
CWE-911 Improper Update of Reference Count weakness

References

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc Broken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/8893.php Broken Link
http://www.osvdb.org/5232 Broken Link
http://www.securityfocus.com/bid/4539 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc Broken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/8893.php Broken Link
http://www.osvdb.org/5232 Broken Link
http://www.securityfocus.com/bid/4539 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory