Skip to content
Fencer Vulns
high 7.8

CVE-2009-0687 json

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, a…

published 2009-08-11 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-0687

cvss
7.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
9.5%
EPSS 9.5% chance of exploitation in 30 days, percentile 95%
public exploits
3
Exploit-DB

Summary

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.

Patch / fix

Timeline

  1. First public exploit (EDB-8406)
  2. Published

Exploit prediction

9.52% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-8581 Multiple Vendor - PF Null Pointer Dereference dos, 2009-04-30
  • EDB-8430 OpenBSD 4.5 - IP datagram Null Pointer Deref Denial of Service dos, 2009-04-14
  • EDB-8406 OpenBSD 4.5 - IP datagrams Remote Denial of Service dos, 2009-04-13

CVSS scores

assigned by version score vector
NVD 2.0 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-399 Resource Management Errors

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.