CVE:CVE-2009-0687
CNNVD:CNNVD-200908-094
OpenBSD Packet Filter (PF)中的pf_test_rule函数，当在OpenBSD 4.2 至 4.5， RC3以前的NetBSD 5.0 ， MirOS 10及其早期版本， 以及 MidnightBSD 0.3-current中运行时，会允许远程攻击者通过可以在转换时触发NULL指示器解除参照的精心设计的IP程序包(与一个具有ICMPv6 有效负荷的IPv4 packet有关 )来允许远程攻击者造成拒绝服务(恐慌)。
solution:Upgrade midnightbsd midnightbsd to a higher version than 0.3-current,and avoid the version 0.3-current; Upgrade mirbsd miros to a higher version than 10,and avoid the version (,10]; Upgrade netbsd netbsd to a higher version than 5.0,and avoid the version 5.0; Upgrade openbsd openbsd to a higher version than 4.2,4.3,4.4,4.5,and avoid the version 4.2,4.3,4.4,4.5