PT-2018-2493 · Freebsd+1 · Freebsd+1

Juha-Matti Tilli · Published 2018-08-06 · Updated 2019-10-09 · CVE-2018-6922

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-RELEASE-p1 FreeBSD versions prior to 11.1-RELEASE-p12 FreeBSD versions prior to 10.4-RELEASE-p10

Description The issue is related to an inefficient algorithm used for TCP reassembly in the affected operating systems. This inefficiency can be exploited by a remote attacker who sends specially crafted TCP traffic, potentially leading to a denial of service by consuming excessive CPU resources and degrading network performance. The exploitation can be achieved with relatively small bandwidth cost.

Recommendations For versions prior to 11.2-RELEASE-p1, update to 11.2-RELEASE-p1 or later. For versions prior to 11.1-RELEASE-p12, update to 11.1-RELEASE-p12 or later. For versions prior to 10.4-RELEASE-p10, update to 10.4-RELEASE-p10 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2019-00783

CVE-2018-6922

FREEBSD-SA-18_08

Affected Products

Freebsd

Ibm Aix

References · 9

• https://freebsd.org/security/advisories/FreeBSD-SA-18:08.tcp.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00783 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6922 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6922 · Security Note
• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Patch
• http://securityfocus.com/bid/105058 · Note
• https://security.netapp.com/advisory/ntap-20180815-0002 · Note
• http://securitytracker.com/id/1041425 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp · Note