CVE-2008-1335: Netbsd

High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905.

Affected products

• Netbsd Netbsd: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.1 only; …
• Netbsd Netbsd Current: up to and including 20071027

Published 2008-03-13. Last modified 2026-06-16.