In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP pack…

{
                    "defaultStatus": "unaffected",
                    "modules": [
                        "IPv4 ARP (sys/netinet)"
                    ],
                    "product": "DragonFlyBSD",
                    "programFiles": [
                        "sys/netinet/if_ether.c"
                    ],
                    "programRoutines": [
                        {
                            "name": "arpintr()"
                        },
                        {
                            "name": "in_arpinput()"
                        },
                        {
                            "name": "in_arpreply()"
                        }
                    ],
                    "repo": "https://github.com/DragonFlyBSD/DragonFlyBSD",
                    "vendor": "DragonFlyBSD",
                    "versions": [
                        {
                            "lessThan": "4bb22ffcf2e9fb44995fbfd9945194afc87fb182",
                            "status": "affected",
                            "version": "984263bcb83ad82313113c6ac840d99124d8f90c",
                            "versionType": "git"
                        }
                    ]
                }