FreeBSD FreeBSD
At a glance
- Source
- NVD
- EPSS
- EPSS 3.19 % · percentile 88 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- freebsd
- NVD status
- Modified
Description
One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to reassemble the data. This causes the CPU time spent on segment processing to grow linearly with the number of segments in the reassembly queue. An attacker who has the ability to send TCP traffic to a victim system can degrade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembly handling, with relatively small bandwidth cost.
Weaknesses (CWE)
- CWE-400 — Uncontrolled Resource Consumption
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | MEDIUM 5.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2018-18666
- GCVE · GCVE-0-2018-6922
CERT-FR advisories
- CERTFR-2018-AVI-539 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:freebsd:freebsd:10.4:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p5:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p6:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p7:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p8:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:10.4:p9:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p11:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p5:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p6:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p7:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.1:p9:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| FreeBSD · FreeBSD | affected All versions prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, 10.4-RELEASE-p10 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |