CVE-2009-0687: Midnightbsd

High severity, CVSS 7.8. EPSS: 9.5% chance of exploitation in the next 30 days.

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.

Affected products

• Midnightbsd Midnightbsd: version 0.3-current only
• Mirbsd Miros: up to and including 10
• Netbsd Netbsd: version 5.0 only
• OpenBSD OpenBSD: version 4.2 only; version 4.3 only; version 4.4 only; version 4.5 only

Published 2009-08-11. Last modified 2026-06-16.