PT-2018-2493 · Freebsd+1 · Freebsd+1

Juha-Matti Tilli · Publicado 2018-08-06 · Atualizado 2019-10-09 · CVE-2018-6922

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-RELEASE-p1 FreeBSD versions prior to 11.1-RELEASE-p12 FreeBSD versions prior to 10.4-RELEASE-p10

Description The issue is related to an inefficient algorithm used for TCP reassembly in the affected operating systems. This inefficiency can be exploited by a remote attacker who sends specially crafted TCP traffic, potentially leading to a denial of service by consuming excessive CPU resources and degrading network performance. The exploitation can be achieved with relatively small bandwidth cost.

Recommendations For versions prior to 11.2-RELEASE-p1, update to 11.2-RELEASE-p1 or later. For versions prior to 11.1-RELEASE-p12, update to 11.1-RELEASE-p12 or later. For versions prior to 10.4-RELEASE-p10, update to 10.4-RELEASE-p10 or later.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

BDU:2019-00783

CVE-2018-6922

FREEBSD-SA-18_08

Produtos afetados

Freebsd

Ibm Aix

Referências · 9

• http://securityfocus.com/bid/105058 · Nota
• https://freebsd.org/security/advisories/FreeBSD-SA-18:08.tcp.asc · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20180815-0002 · Nota
• https://bdu.fstec.ru/vul/2019-00783 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6922 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6922 · Nota de Segurança
• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Correção
• http://securitytracker.com/id/1041425 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp · Nota