CVE-2013-5691: Freebsd

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows local users to perform link-layer actions, cause a denial of service (panic), or possibly gain privileges via a crafted application.

Affected products

• Freebsd Freebsd: version 8.3 only; version 9.0 only; version 9.1 only; version 9.2 only

Published 2013-09-23. Last modified 2026-06-16.