CVE-2019-5597

Published May 15, 2019

Last updated 5 years ago

Overview

Description: In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter.
Source: secteam@freebsd.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 9.1
Impact score: 5.2
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 6.4
Impact score: 4.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3ACD1D8D-B3BC-4E99-B846-90A4071DB87B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "699FE432-8DF0-49F1-A98B-0E19CE01E5CE"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20B06752-39EE-4600-AC1F-69FB9C88E2A8"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "22365F7C-2B00-4B61-84E8-EFBA3B8CFDC0"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E86CD544-86C4-4D9D-9CE5-087027509EDA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "64E47AE7-BB45-428E-90E9-38BFDFF23650"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "586B9FA3-65A2-41EB-A848-E4A75565F0CA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0B15B89-3AD2-4E03-9F47-DA934702187B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "826B53C2-517F-4FC6-92E8-E7FCB24F91B4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93F10A46-AEF2-4FDD-92D6-0CF07B70F986"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4029113-130F-4A33-A8A0-BC3E74000378"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References