The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Midnightbsd | Midnightbsd | 0.3-current (including) | 0.3-current (including) |
| Miros | Mirbsd | * | 10 (including) |
| Netbsd | Netbsd | 5.0 (including) | 5.0 (including) |
| Openbsd | Openbsd | 4.2 (including) | 4.2 (including) |
| Openbsd | Openbsd | 4.3 (including) | 4.3 (including) |
| Openbsd | Openbsd | 4.4 (including) | 4.4 (including) |
| Openbsd | Openbsd | 4.5 (including) | 4.5 (including) |