CVE-2009-0687

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.

• CWE-399

• ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patchPatch, Vendor Advisory
• http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.ascVendor Advisory
• http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt
• http://www.openbsd.org/errata43.html#013_pfPatch, Vendor Advisory
• http://www.openbsd.org/errata44.html#013_pfPatch, Vendor Advisory
• http://www.openbsd.org/errata45.html#002_pfPatch, Vendor Advisory
• http://www.osvdb.org/53608
• http://www.securityfocus.com/archive/1/502634
• http://www.vupen.com/english/advisories/2009/1015Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49837
• https://www.exploit-db.com/exploits/8406
• https://www.exploit-db.com/exploits/8581
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patchPatch, Vendor Advisory
• http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.ascVendor Advisory
• http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt
• http://www.openbsd.org/errata43.html#013_pfPatch, Vendor Advisory
• http://www.openbsd.org/errata44.html#013_pfPatch, Vendor Advisory
• http://www.openbsd.org/errata45.html#002_pfPatch, Vendor Advisory
• http://www.osvdb.org/53608
• http://www.securityfocus.com/archive/1/502634
• http://www.vupen.com/english/advisories/2009/1015Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49837
• https://www.exploit-db.com/exploits/8406
• https://www.exploit-db.com/exploits/8581

Published

Aug 11, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0678images/captcha.php in RavenNuke 2.30 allows remote attackers…
• CVE-2009-0679Cross-site scripting (XSS) vulnerability in the Your Account…
• CVE-2009-0680cgi-bin/welcome/VPN_only in the web interface in Netgear SSL…
• CVE-2009-0681PGP Desktop before 9.10 allows local users to (1) cause a de…
• CVE-2009-0682vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys …
• CVE-2009-0686The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0…
• CVE-2009-0688Multiple buffer overflows in the CMU Cyrus SASL library befo…
• CVE-2009-0689Array index error in the (1) dtoa implementation in dtoa.c (…
• CVE-2009-0690The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 …
• CVE-2009-0691The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 …
• CVE-2009-0692Stack-based buffer overflow in the script_write_params metho…
• CVE-2009-0693Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x…