Strix
26.1K

CVE-2009-0418

UnknownEPSS 8.17%

Last modified

CVE-2009-0418 is a vulnerability of currently unknown severity. The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.. EPSS estimates a 8.17% chance of exploitation in the next 30 days.

Description

The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.

Metrics

EPSS Probability
8.17%

94.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HpHp-Uxb.11.11
HpHp-Uxb.11.23
HpHp-Uxb.11.31

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-0418?
The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.
How severe is CVE-2009-0418?
Severity scoring for CVE-2009-0418 is pending analysis. The EPSS model estimates a 8.17% probability of exploitation in the next 30 days.
How do I fix CVE-2009-0418?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-0418?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST