PT-2026-29476 · Pf+1 · Pf+1

Michael Gmelin · Publicado 2026-03-25 · Atualizado 2026-04-01 · CVE-2026-4748

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions pf (affected versions not specified)

Description A regression in hash calculation causes rules with the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range to be silently dropped as duplicates. Only the first such rule is loaded. Rules using the address[/mask-bits] syntax are not affected. Keywords representing actions like 'log', 'return tll', or 'dnpipe' may also be affected, but this is unlikely as such rules are typically redundant. Affected rules are silently ignored, potentially leading to unexpected behavior, including over- and underblocking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-1023

CWE-480

CWE-754

Identificadores relacionados

BDU:2026-04675

CVE-2026-4748

Produtos afetados

Freebsd

Pf

Referências · 6

• https://twitter.com/CVEnew/status/2039279648312602844 · Publicação no Twitter
• https://security.freebsd.org/advisories/FreeBSD-SA-26:09.pf.asc · Aviso do Fabricante
• https://twitter.com/cyberbivash/status/2039248884250169649 · Publicação no Twitter
• https://freebsd.org/security/advisories/FreeBSD-SA-26:09.pf.asc · Nota
• https://bdu.fstec.ru/vul/2026-04675 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-4748 · Nota de Segurança