CVE-2008-3530
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and...
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
Exploit likelihood
What each source reports
NVD Score used
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
- Record
CVE-2008-3530- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
- Record
CVE-2008-3530- Updated
- 2026-11-02
EUVDEUVD-2008-3516 No score
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
- Record
EUVD-2008-3516- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-54hj-xp7v-pcj6 No score
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and...
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
- Record
GHSA-54hj-xp7v-pcj6- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3530 is a high vulnerability (CVSS 7.1) in Freebsd, published September 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.51%, the 91st percentile. No source names a fixed version.
References
secunia.com/advisories/31745
support.apple.com/kb/HT3549
security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc
lists.apple.com/archives/security-announce/2009/May/msg00002.html
Show 10 moreShow less
securitytracker.com/id?1021111
exchange.xforce.ibmcloud.com/vulnerabilities/44908
securityfocus.com/bid/31004
us-cert.gov/cas/techalerts/TA09-133A.html
vupen.com/english/advisories/2009/1297
nvd.nist.gov/vuln/detail/CVE-2008-3530
github.com/advisories/GHSA-54hj-xp7v-pcj6