The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attacker…

published 2008-09-10 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-2459

cvss: 7.1; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.4%; EPSS 2.4% chance of exploitation in 30 days, percentile 84%
public exploits: 0; none known

The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.

Patch / fix

links 2

Exploit prediction

2.43% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

cert.fi http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.1	AV:N/AC:M/Au:N/C:N/I:N/A:C

Classification

Weakness

CWE-189 Numeric Errors

References

cert.fi /haavoittuvuudet/2008/advisory-netbsd.html
exploit
ftp.netbsd.org /pub/NetBSD/security/advisories/NetBSD-SA2008-011.txt.asc
vendor-advisory
securityfocus.com /bid/31026
vdb-entry
cvsweb.netbsd.org /bsdweb.cgi/src/sys/netinet6/mld6.c
kb.cert.org /vuls/id/817940
third-party-advisory, us-government-resource
freebsd.org /cgi/cvsweb.cgi/src/sys/netinet6/mld6.c
cvsweb.netbsd.org /bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h
freebsd.org /cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.34%3Br2=1.35%3Bf=h
securitytracker.com /id?1020822
vdb-entry

Sources

CVE List CVE-2008-2464
NVD CVE-2008-2464

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary