CyberRota Analysis
AI-GeneratedThe MidnightBSD Package Manager's ping() function prior to version 2.7.8 is vulnerable due to improper validation of ICMP replies, allowing network attackers to manipulate mirror latency selection or exploit malformed packets to trigger out-of-bounds reads. Although the severity is rated low, organizations using affected versions should prioritize upgrading to version 2.7.8 to mitigate potential network manipulation risks and ensure system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
mport is the MidnightBSD Package Manager. Prior to 2.7.8, ping() in libmport/ping.c accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of ip_hl. A network attacker able to inject or spoof visible ICMP replies could influence mirror latency selection, while a malformed packet carrying IP options could shift the ICMP header and trigger an out-of-bounds read. This issue is fixed in version 2.7.8.