CVE-2008-2464: Freebsd

High severity, CVSS 7.1. EPSS: 2.4% chance of exploitation in the next 30 days.

The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.

Affected products

• Freebsd Freebsd: any version
• Kame Kame: any version
• Netbsd Netbsd: version 4.0 only

Published 2008-09-11. Last modified 2026-06-16.