CVE-2019-5613

Published Feb 18, 2020

Last updated 5 years ago

CVSS critical 9.8

Overview

Description: In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated.
Source: secteam@freebsd.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-345

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "826B53C2-517F-4FC6-92E8-E7FCB24F91B4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93F10A46-AEF2-4FDD-92D6-0CF07B70F986"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C7B8FCA-2170-469A-B6D6-2C6AB254F20F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p11:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E94067A1-5C68-4401-A7B6-29B4FE553733"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87EE567B-7604-41CC-B0A7-B51255D4C240"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E1AD57A9-F53A-4E40-966E-F2F50852C5E4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4029113-130F-4A33-A8A0-BC3E74000378"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "46C5A6FD-7BBF-4E84-9895-8EE14DC846E4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "882669AB-BCFC-4517-A3E9-33D344F1ED0D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC3D24FB-50A2-4E37-A479-AF21F8ECD706"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3070787D-76E1-4671-B99D-213F7103B3A2"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0140276F-9C31-4B5C-A5AC-DE0EBB885275"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References