Deskripsi CVE

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Freebsd>>Freebsd >> Version 5.3

Freebsd>>Freebsd >> Version 5.4

Freebsd>>Freebsd >> Version 6.0

Referensi

http://www.securityfocus.com/bid/16375
Tags : vdb-entry, x_refsource_BID

http://securitytracker.com/id?1015542
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/18609
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/24337
Tags : vdb-entry, x_refsource_XF

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc
Tags : vendor-advisory, x_refsource_FREEBSD

http://www.osvdb.org/22732
Tags : vdb-entry, x_refsource_OSVDB

http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104
Tags : x_refsource_CONFIRM

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc
Tags : vendor-advisory, x_refsource_NETBSD

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.41%	–	–
2022-03-06	–	–	1.41%	–	–
2022-04-03	–	–	1.41%	–	–
2022-07-10	–	–	1.41%	–	–
2022-12-25	–	–	1.41%	–	–
2023-01-01	–	–	1.41%	–	–
2023-02-26	–	–	1.41%	–	–
2023-03-12	–	–	–	3.39%	–
2023-03-26	–	–	–	4.21%	–
2024-02-11	–	–	–	4.21%	–
2024-06-02	–	–	–	4.21%	–
2024-11-24	–	–	–	4.21%	–
2024-12-22	–	–	–	2.15%	–
2025-01-05	–	–	–	1.41%	–
2025-01-19	–	–	–	1.41%	–
2025-03-02	–	–	–	1.41%	–
2025-03-09	–	–	–	1.41%	–
2025-03-18	–	–	–	–	5.15%
2025-08-01	–	–	–	–	5.15%
2025-08-04	–	–	–	–	5.15%
2025-12-01	–	–	–	–	5.15%
2025-12-04	–	–	–	–	5.15%
2025-12-13	–	–	–	–	5.15%
2025-12-16	–	–	–	–	5.15%
2025-12-17	–	–	–	–	5.15%

Tanggal	Persentil
2022-02-06	5%
2022-03-06	51%
2022-04-03	71%
2022-07-10	72%
2022-12-25	73%
2023-01-01	72%
2023-02-26	73%
2023-03-12	9%
2023-03-26	91%
2024-02-11	92%
2024-06-02	92%
2024-11-24	93%
2024-12-22	89%
2025-01-05	86%
2025-01-19	86%
2025-03-02	87%
2025-03-09	87%
2025-03-18	89%
2025-08-01	9%
2025-08-04	89%
2025-12-01	9%
2025-12-04	89%
2025-12-13	9%
2025-12-16	89%
2025-12-17	9%

CVE-2006-0381 : Detail

CVE-2006-0381