PT-2018-3726 · Freebsd · Freebsd

Jakub Jirasek · Publicado 2018-09-28 · Atualizado 2021-07-27 · CVE-2018-6925

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLE(r338986) FreeBSD versions prior to 11.2-RELEASE-p4 FreeBSD versions prior to 11.1-RELEASE-p15 FreeBSD versions prior to 10.4-STABLE(r338985) FreeBSD versions prior to 10.4-RELEASE-p13

Description The issue is related to errors in pointer dereferencing, which can lead to a crash of the application when exploited. Specifically, in FreeBSD, improper maintenance of IPv6 protocol control block flags through various failure paths can cause a NULL pointer dereference, leading to a kernel crash. An unprivileged authenticated local user may be able to exploit this issue.

Recommendations For versions prior to 11.2-STABLE(r338986), update to 11.2-STABLE(r338986) or later. For versions prior to 11.2-RELEASE-p4, update to 11.2-RELEASE-p4 or later. For versions prior to 11.1-RELEASE-p15, update to 11.1-RELEASE-p15 or later. For versions prior to 10.4-STABLE(r338985), update to 10.4-STABLE(r338985) or later. For versions prior to 10.4-RELEASE-p13, update to 10.4-RELEASE-p13 or later.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2021-03885

CVE-2018-6925

Produtos afetados

Freebsd

Referências · 6

• https://bdu.fstec.ru/vul/2021-03885 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-6925 · Nota de Segurança
• https://security.freebsd.org/advisories/FreeBSD-EN-18:11.listen.asc · Aviso do Fabricante
• https://flexera.com/company/secunia-research/advisories/SR-2018-21.html · Nota
• https://freebsd.org/security/advisories/FreeBSD-EN-18:11.listen.asc · Nota
• https://osv.dev/vulnerability/CVE-2018-6925 · Aviso do Fabricante