CVE-2006-0381: Freebsd

Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days.

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.

Affected products

• Freebsd Freebsd: version 5.3 only; version 5.4 only; version 6.0 only

Published 2006-01-25. Last modified 2026-06-16.