7.5

CVE-2025-14769

ipfw denial of service

In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing engine.  A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference.

Maliciously crafted packets sent from a remote host may result in a Denial of Service (DoS) if the `tcp-setmss` directive is used and a subsequent rule would allow the traffic to pass.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 13.5 Update -
Freebsd ≫ Freebsd Version 13.5 Update p1
Freebsd ≫ Freebsd Version 13.5 Update p2
Freebsd ≫ Freebsd Version 13.5 Update p3
Freebsd ≫ Freebsd Version 13.5 Update p4
Freebsd ≫ Freebsd Version 13.5 Update p5
Freebsd ≫ Freebsd Version 13.5 Update p6
Freebsd ≫ Freebsd Version 13.5 Update p7
Freebsd ≫ Freebsd Version 14.3 Update -
Freebsd ≫ Freebsd Version 14.3 Update p1
Freebsd ≫ Freebsd Version 14.3 Update p2
Freebsd ≫ Freebsd Version 14.3 Update p3
Freebsd ≫ Freebsd Version 14.3 Update p4
Freebsd ≫ Freebsd Version 14.3 Update p5
Freebsd ≫ Freebsd Version 14.3 Update p6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.1% 0.613
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://security.freebsd.org/advisories/FreeBSD-SA-25:11.ipfw.asc
Vendor Advisory