CVE-2023-3107: Freebsd

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

Affected products

• Freebsd Freebsd: version 12.4 only; version 13.1 only; version 13.2 only
• Netapp Clustered Data Ontap: version 9.0 only

Published 2023-08-01. Last modified 2026-06-17.