PT-2018-5294 · Freebsd · Ipfilter+1

Published 2017-04-27 · Updated 2019-10-09 · CVE-2017-1081

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.0-STABLE FreeBSD versions prior to 11.0-RELEASE-p10 FreeBSD versions prior to 10.3-STABLE FreeBSD versions prior to 10.3-RELEASE-p19

Description The issue arises when ipfilter is used with the "keep state" or "keep frags" options, causing a kernel panic due to incorrect memory handling when the system is fed specially crafted packet fragments.

Recommendations For versions prior to 11.0-STABLE, update to 11.0-STABLE or later. For versions prior to 11.0-RELEASE-p10, update to 11.0-RELEASE-p10 or later. For versions prior to 10.3-STABLE, update to 10.3-STABLE or later. For versions prior to 10.3-RELEASE-p19, update to 10.3-RELEASE-p19 or later.

Fix

Use After Free

RCE

Weakness Enumeration

CWE-416

CWE-20

Related Identifiers

CVE-2017-1081

FREEBSD-SA-17_04

Affected Products

Freebsd

Ipfilter

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1081 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1081 · Vendor Advisory
• https://freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc · Vendor Advisory
• http://securityfocus.com/bid/98089 · Note
• http://securitytracker.com/id/1038369 · Note