FreeBSD FreeBSD
At a glance
- Source
- NVD
- EPSS
- EPSS 4.21 % · percentile 91 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- freebsd
- NVD status
- Modified
Description
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.
Weaknesses (CWE)
- CWE-835 — Loop with Unreachable Exit Condition
References
- http://www.securitytracker.com/id/1040628
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.asc
- http://www.securityfocus.com/bid/103666
- https://support.apple.com/kb/HT210090
- https://seclists.org/bugtraq/2019/May/77
- http://seclists.org/fulldisclosure/2019/Jun/6
- https://support.apple.com/kb/HT210091
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2018-18662
- GCVE · GCVE-0-2018-6918
CERT-FR advisories
- CERTFR-2020-AVI-198 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
- CERTFR-2019-AVI-288 — Multiples vulnérabilités dans Apple AirPort · cert.ssi.gouv.fr
- CERTFR-2019-AVI-241 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*≥ 10.0 < 10.4cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*≥ 11.0 < 11.1
Affected products
| Product | Versions |
|---|---|
| FreeBSD · FreeBSD | affected All supported versions of FreeBSD. |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |