FreeBSD-EN-20:27.ure : ure packet-in-packet attack

Versions Affected : All verisons prior to FreeNAS 11.3-U5

Description

A programming error in the ure(4) device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes.