## Description

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### freebsd - freebsd

Affected Versions:

- 3.0

### freebsd - freebsd

Affected Versions:

- 3.1

### freebsd - freebsd

Affected Versions:

- 3.2

### freebsd - freebsd

Affected Versions:

- 3.3

### freebsd - freebsd

Affected Versions:

- 3.4

### freebsd - freebsd

Affected Versions:

- 3.5

### freebsd - freebsd

Affected Versions:

- 4.0

### freebsd - freebsd

Affected Versions:

- 5.0

### netbsd - netbsd

Affected Versions:

- 1.4

### netbsd - netbsd

Affected Versions:

- 1.4.1

### netbsd - netbsd

Affected Versions:

- 1.4.1

### netbsd - netbsd

Affected Versions:

- 1.4.1

### netbsd - netbsd

Affected Versions:

- 1.4.1

### netbsd - netbsd

Affected Versions:

- 1.4.2

### netbsd - netbsd

Affected Versions:

- 1.4.2

### netbsd - netbsd

Affected Versions:

- 1.4.2

### netbsd - netbsd

Affected Versions:

- 1.4.2

### openbsd - openbsd

Affected Versions:

- 2.5

### openbsd - openbsd

Affected Versions:

- 2.6

### openbsd - openbsd

Affected Versions:

- 2.7

## References

- http://www.securityfocus.com/bid/622
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3298
- http://www.securityfocus.com/bid/622
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3298

Neural Processor Active