BSD Kernel ARP Cache Flooding Denial of Service Vulnerability

BSD Kernel ARP Cache Flooding Denial of Service Vulnerability

Solution:
OpenBSD has acknowledged that this issue affects OpenBSD version 3.2 and 3.3. A patch is available to address this issue. The patches are linked below.

FreeBSD has addressed this issue in the latest RELENG releases. They have also issued a patch which is known to work with FreeBSD 5-CURRENT, 4-9-PRELEASE, and 4.8 systems. Users wishing to upgrade to the latest RELENG release can see the attached advisory for further details.

Apple has also released MacOS X 10.2.8 to address this issue. This update can be applied via the Software Update pane in System Preferences. Manual updates are available via the Apple Software Downloads site.

OpenBSD has issued a new patch for 3.4. At the time of writing, the patch is not available.

SGI has released an advisory (20050502-01-P) and patches to address this issue in SGI IRIX. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate patches.

OpenBSD OpenBSD 3.2