Description

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.

INFO

Published Date :

2026-04-20T00:00:00.000Z

Last Modified :

2026-04-21T13:27:42.310Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2026-41285 vulnerability.

Vendors Products
Openbsd
  • Openbsd
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-41285.

URL Resource
https://github.com/openbsd/src/commit/086c5738bcd3c203bcc08d024fcf983cb409115f cve-icon cve-icon
https://www.openbsd.org/errata78.html cve-icon cve-icon
https://www.rfc-editor.org/rfc/rfc4861#section-4.6 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact