misc/80354: Path MTU discovery ICMP NATD BSD 6.0 crash

[realsight]

>Number:         80354
>Category:       misc
>Synopsis:       Path MTU discovery ICMP NATD BSD 6.0 crash
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Apr 26 08:00:34 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     realsight
>Release:        free BSD 6.0
>Organization:
>Environment:
kernel custom FreeBSD 6.0 
custom kernel options are:
IPFIREWALL
DUMMYNET
IPDIVERT

>Description:
after sending serval icmp malfromed packets related to Path MTU discovery attack freebsd crashes due the fact of consuming large amounts of cpu and memory resources, tested as an throughput of NATD 

related infos:
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html

da
cu

>How-To-Repeat:
      
>Fix:
      
>Release-Note:
>Audit-Trail:
>Unformatted: