7.5

CVE-2019-5598

In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if the outer ICMP or ICMP6 packet has the same destination IP as the source IP of the inner protocol packet allowing a maliciously crafted ICMP/ICMP6 packet could bypass the packet filter rules and be passed to a host that would otherwise be unavailable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 11.2 Update -
Freebsd ≫ Freebsd Version 11.2 Update p2
Freebsd ≫ Freebsd Version 11.2 Update p3
Freebsd ≫ Freebsd Version 11.2 Update p4
Freebsd ≫ Freebsd Version 11.2 Update p5
Freebsd ≫ Freebsd Version 11.2 Update p6
Freebsd ≫ Freebsd Version 11.2 Update p7
Freebsd ≫ Freebsd Version 11.2 Update p9
Freebsd ≫ Freebsd Version 11.2 Update rc3
Freebsd ≫ Freebsd Version 12.0 Update -
Freebsd ≫ Freebsd Version 12.0 Update p1
Freebsd ≫ Freebsd Version 12.0 Update p3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.34% 0.871
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
http://www.securityfocus.com/bid/108395
https://security.netapp.com/advisory/ntap-20190611-0001/
http://packetstormsecurity.com/files/152934/FreeBSD-Security-Advisory-FreeBSD-SA-19-06.pf.html
Third Party Advisory
VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:06.pf.asc
Patch
Vendor Advisory
https://www.synacktiv.com/posts/systems/icmp-reachable.html
Third Party Advisory
http://seclists.org/fulldisclosure/2025/Apr/1