DragonFlyBSD vulnerabilities
We track 1 vulnerability in DragonFlyBSD products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest DragonFlyBSD vulnerabilities
- 7.1 High severity
DragonFlyBSD: Improper Handling of Length Parameter Inconsistency
In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP packets. in_arpreply() t