PT-2018-5294 · Freebsd · Ipfilter+1

Publicado 2017-04-27 · Atualizado 2019-10-09 · CVE-2017-1081

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.0-STABLE FreeBSD versions prior to 11.0-RELEASE-p10 FreeBSD versions prior to 10.3-STABLE FreeBSD versions prior to 10.3-RELEASE-p19

Description The issue arises when ipfilter is used with the "keep state" or "keep frags" options, causing a kernel panic due to incorrect memory handling when the system is fed specially crafted packet fragments.

Recommendations For versions prior to 11.0-STABLE, update to 11.0-STABLE or later. For versions prior to 11.0-RELEASE-p10, update to 11.0-RELEASE-p10 or later. For versions prior to 10.3-STABLE, update to 10.3-STABLE or later. For versions prior to 10.3-RELEASE-p19, update to 10.3-RELEASE-p19 or later.

Correção

Use After Free

RCE

Enumeração de Fraquezas

CWE-416

CWE-20

Identificadores relacionados

CVE-2017-1081

FREEBSD-SA-17_04

Produtos afetados

Freebsd

Ipfilter

Referências · 5

• http://securityfocus.com/bid/98089 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1081 · Nota de Segurança
• http://securitytracker.com/id/1038369 · Nota
• https://osv.dev/vulnerability/CVE-2017-1081 · Aviso do Fabricante
• https://freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc · Aviso do Fabricante