Title: BSD Kernel ARP Cache Flooding Denial of Service Vulnerability
Severity: HIGH
Description:
The Address Resolution Protocol (ARP) is used to map Internet Protocol (IP) addresses to MAC addresses. When an IP address is resolved to a MAC address, it is stored in the ARP cache within the BSD kernel.
A vulnerability has been discovered in the BSD kernel. The problem lies in the method in which BSD handles and caches information stored in ARP requests. Specifically, if an ARP request is received and the IP cannot be resolved, if a default route exists the MAC address will be given an entry within the ARP cache regardless. As a result, especially on systems with a default ipv4 route, an attacker may be capable of filling up the available ARP cache space and triggering a system panic.
A successful attack can be accomplished by sending a high volume of ARP requests, each with a unique spoofed IP address, to a target system.
The issue is reported to exist in FreeBSD, IRIX and MacOS X. Other systems which use a BSD-derived kernel may also be prone to the issue.
Affected Products:
- Apple Mac OS X 10.2.0
- Apple Mac OS X 10.2.1
- Apple Mac OS X 10.2.2
- Apple Mac OS X 10.2.3
- Apple Mac OS X 10.2.4
- Apple Mac OS X 10.2.5
- Apple Mac OS X 10.2.6
- Apple Mac OS X 10.2.7
- Apple Mac OS X Server 10.2.0
- Apple Mac OS X Server 10.2.1
- Apple Mac OS X Server 10.2.2
- Apple Mac OS X Server 10.2.3
- Apple Mac OS X Server 10.2.4
- Apple Mac OS X Server 10.2.5
- Apple Mac OS X Server 10.2.6
- Apple Mac OS X Server 10.2.7
- FreeBSD FreeBSD 4.0.0
- FreeBSD FreeBSD 4.1.0
- FreeBSD FreeBSD 4.1.1
- FreeBSD FreeBSD 4.2.0
- FreeBSD FreeBSD 4.3.0
- FreeBSD FreeBSD 4.4.0
- FreeBSD FreeBSD 4.5.0
- FreeBSD FreeBSD 4.6.0
- FreeBSD FreeBSD 4.6.2
- FreeBSD FreeBSD 4.7.0
- FreeBSD FreeBSD 4.8.0
- FreeBSD FreeBSD 4.9.0 -PRERELEASE
- FreeBSD FreeBSD 5.0.0
- FreeBSD FreeBSD 5.1.0
- OpenBSD OpenBSD 3.2
- OpenBSD OpenBSD 3.3
- OpenBSD OpenBSD 3.4
- SGI IRIX 6.5.0
- SGI IRIX 6.5.0 .19f
- SGI IRIX 6.5.0 .19m
- SGI IRIX 6.5.0 20
- SGI IRIX 6.5.1
- SGI IRIX 6.5.10
- SGI IRIX 6.5.10 f
- SGI IRIX 6.5.10 m
- SGI IRIX 6.5.11
- SGI IRIX 6.5.11 f
- SGI IRIX 6.5.11 m
- SGI IRIX 6.5.12
- SGI IRIX 6.5.12 f
- SGI IRIX 6.5.12 m
- SGI IRIX 6.5.13
- SGI IRIX 6.5.13 f
- SGI IRIX 6.5.13 m
- SGI IRIX 6.5.14
- SGI IRIX 6.5.14 f
- SGI IRIX 6.5.14 m
- SGI IRIX 6.5.15
- SGI IRIX 6.5.15 f
- SGI IRIX 6.5.15 m
- SGI IRIX 6.5.16
- SGI IRIX 6.5.16 f
- SGI IRIX 6.5.16 m
- SGI IRIX 6.5.17
- SGI IRIX 6.5.17 f
- SGI IRIX 6.5.17 m
- SGI IRIX 6.5.18
- SGI IRIX 6.5.18 f
- SGI IRIX 6.5.18 m
- SGI IRIX 6.5.19
- SGI IRIX 6.5.19 f
- SGI IRIX 6.5.19 m
- SGI IRIX 6.5.2
- SGI IRIX 6.5.2 f
- SGI IRIX 6.5.2 m
- SGI IRIX 6.5.20
- SGI IRIX 6.5.20 f
- SGI IRIX 6.5.20 m
- SGI IRIX 6.5.21
- SGI IRIX 6.5.21 f
- SGI IRIX 6.5.21 m
- SGI IRIX 6.5.22
- SGI IRIX 6.5.22 m
- SGI IRIX 6.5.3
- SGI IRIX 6.5.3 f
- SGI IRIX 6.5.3 m
- SGI IRIX 6.5.4
- SGI IRIX 6.5.4 f
- SGI IRIX 6.5.4 m
- SGI IRIX 6.5.5
- SGI IRIX 6.5.5 f
- SGI IRIX 6.5.5 m
- SGI IRIX 6.5.6
- SGI IRIX 6.5.6 f
- SGI IRIX 6.5.6 m
- SGI IRIX 6.5.7
- SGI IRIX 6.5.7 f
- SGI IRIX 6.5.7 m
- SGI IRIX 6.5.8
- SGI IRIX 6.5.8 f
- SGI IRIX 6.5.8 m
- SGI IRIX 6.5.9
- SGI IRIX 6.5.9 f
- SGI IRIX 6.5.9 m
References:
- Apple: Apple Security Updates
- Apple: Apple Software Downloads
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
