CVE-2006-0381

CVE-2006-0381 describes a logic error within the IP fragment cache functionality of pf in FreeBSD versions 5.3, 5.4, and 6.0, as well as OpenBSD. When specific 'scrub fragment' rules are active, a remote attacker can trigger a denial of service by sending crafted packets that cause a packet fragment to be inserted twice, leading to a system crash. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, resulting in a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.