CVE-2017-1081

Name	CVE-2017-1081
Description	In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
kfreebsd-10 (PTS)	jessie	10.1~svn274115-4	vulnerable
	stretch	10.3~svn300087-3	vulnerable
	buster	10.3~svn300087-5	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
kfreebsd-10	source	(unstable)	(unfixed)	unimportant

https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc
kfreebsd not covered by security support