7.8

CVE-2019-5611

Exploit
In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 11.2 Update -
Freebsd ≫ Freebsd Version 11.2 Update p10
Freebsd ≫ Freebsd Version 11.2 Update p11
Freebsd ≫ Freebsd Version 11.2 Update p12
Freebsd ≫ Freebsd Version 11.2 Update p13
Freebsd ≫ Freebsd Version 11.2 Update p2
Freebsd ≫ Freebsd Version 11.2 Update p3
Freebsd ≫ Freebsd Version 11.2 Update p4
Freebsd ≫ Freebsd Version 11.2 Update p5
Freebsd ≫ Freebsd Version 11.2 Update p6
Freebsd ≫ Freebsd Version 11.2 Update p7
Freebsd ≫ Freebsd Version 11.2 Update p8
Freebsd ≫ Freebsd Version 11.2 Update p9
Freebsd ≫ Freebsd Version 11.3
Freebsd ≫ Freebsd Version 11.3 Update -
Freebsd ≫ Freebsd Version 11.3 Update p1
Freebsd ≫ Freebsd Version 11.3 Update p2
Freebsd ≫ Freebsd Version 11.3 Update p3
Freebsd ≫ Freebsd Version 12.0 Update -
Freebsd ≫ Freebsd Version 12.0 Update p1
Freebsd ≫ Freebsd Version 12.0 Update p3
Freebsd ≫ Freebsd Version 12.0 Update p4
Freebsd ≫ Freebsd Version 12.0 Update p5
Freebsd ≫ Freebsd Version 12.0 Update p8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.42% 0.901
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.netapp.com/advisory/ntap-20190910-0002/
Third Party Advisory
http://packetstormsecurity.com/files/154170/FreeBSD-Security-Advisory-FreeBSD-SA-19-22.mbuf.html
Patch
Third Party Advisory
Exploit
VDB Entry
https://seclists.org/bugtraq/2019/Aug/33
Patch
Third Party Advisory
Exploit
Mailing List
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:22.mbuf.asc
Patch
Vendor Advisory