PT-2018-3551 · Freebsd · Freebsd

Maxime Villard · Published 2018-03-07 · Updated 2018-03-29 · CVE-2018-6916

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: FreeBSD versions prior to 11.1-STABLE FreeBSD versions prior to 11.1-RELEASE-p7 FreeBSD versions prior to 10.4-STABLE FreeBSD versions prior to 10.4-RELEASE-p7 FreeBSD versions prior to 10.3-RELEASE-p28

Description: The issue is related to the kernel's improper validation of IPsec packets from a trusted host and a use-after-free vulnerability in the IPsec AH handling code. This could lead to a system crash or other unpredictable results. The vulnerability may also allow a remote attacker to execute arbitrary code.

Recommendations: For versions prior to 11.1-STABLE, update to 11.1-STABLE or later. For versions prior to 11.1-RELEASE-p7, update to 11.1-RELEASE-p7 or later. For versions prior to 10.4-STABLE, update to 10.4-STABLE or later. For versions prior to 10.4-RELEASE-p7, update to 10.4-RELEASE-p7 or later. For versions prior to 10.3-RELEASE-p28, update to 10.3-RELEASE-p28 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2020-04498

CVE-2018-6916

FREEBSD-SA-18_01

Affected Products

Freebsd

References · 8

• https://bdu.fstec.ru/vul/2020-04498 · Security Note
• https://freebsd.org/security/advisories/FreeBSD-SA-18:01.ipsec.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6916 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6916 · Vendor Advisory
• http://securitytracker.com/id/1040460 · Note
• https://securitytracker.com/id/1040460 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11016&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11016&cat=SIRT_1&actp=LIST · Note