CVE-2008-3530

sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.

• CWE-20

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://secunia.com/advisories/31745Vendor Advisory
• http://secunia.com/advisories/32401
• http://secunia.com/advisories/35074
• http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.ascPatch
• http://support.apple.com/kb/HT3467
• http://support.apple.com/kb/HT3549
• http://www.securityfocus.com/bid/31004Patch
• http://www.securitytracker.com/id?1020820
• http://www.securitytracker.com/id?1021111
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/0633
• http://www.vupen.com/english/advisories/2009/1297
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44908
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://secunia.com/advisories/31745Vendor Advisory
• http://secunia.com/advisories/32401
• http://secunia.com/advisories/35074
• http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.ascPatch
• http://support.apple.com/kb/HT3467
• http://support.apple.com/kb/HT3549
• http://www.securityfocus.com/bid/31004Patch
• http://www.securitytracker.com/id?1020820
• http://www.securitytracker.com/id?1021111
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/0633
• http://www.vupen.com/english/advisories/2009/1297
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44908

Published

Sep 5, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3524rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and ot…
• CVE-2008-3525The sbni_ioctl function in drivers/net/wan/sbni.c in the wan…
• CVE-2008-3526Integer overflow in the sctp_setsockopt_auth_key function in…
• CVE-2008-3527arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Ob…
• CVE-2008-3528The error-reporting functionality in (1) fs/ext2/dir.c, (2) …
• CVE-2008-3529Heap-based buffer overflow in the xmlParseAttValueComplex fu…
• CVE-2008-3531Stack-based buffer overflow in sys/kern/vfs_mount.c in the k…
• CVE-2008-3532The NSS plugin in libpurple in Pidgin 2.4.3 does not verify …
• CVE-2008-3533Format string vulnerability in the window_error function in …
• CVE-2008-3534The shmem_delete_inode function in mm/shmem.c in the tmpfs i…
• CVE-2008-3535Off-by-one error in the iov_iter_advance function in mm/file…
• CVE-2008-3536Unspecified vulnerability in ovalarmsrv in HP OpenView Netwo…