CVE-2019-5598

Published May 15, 2019

Last updated 5 years ago

Overview

Description: In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if the outer ICMP or ICMP6 packet has the same destination IP as the source IP of the inner protocol packet allowing a maliciously crafted ICMP/ICMP6 packet could bypass the packet filter rules and be passed to a host that would otherwise be unavailable.
Source: secteam@freebsd.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3ACD1D8D-B3BC-4E99-B846-90A4071DB87B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "699FE432-8DF0-49F1-A98B-0E19CE01E5CE"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20B06752-39EE-4600-AC1F-69FB9C88E2A8"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "22365F7C-2B00-4B61-84E8-EFBA3B8CFDC0"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E86CD544-86C4-4D9D-9CE5-087027509EDA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "64E47AE7-BB45-428E-90E9-38BFDFF23650"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "586B9FA3-65A2-41EB-A848-E4A75565F0CA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0B15B89-3AD2-4E03-9F47-DA934702187B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "878DF67E-420A-4229-BEA8-DB9F7161ED9A"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "826B53C2-517F-4FC6-92E8-E7FCB24F91B4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93F10A46-AEF2-4FDD-92D6-0CF07B70F986"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4029113-130F-4A33-A8A0-BC3E74000378"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References