PT-2019-10239 · None+1 · Sshguard+1

Joshua Signover · Published 2019-03-01 · Updated 2020-08-24 · CVE-2018-20798

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.4 1

Description: The issue arises from the expiretable configuration in pfSense, which sets block durations that are incompatible with those implemented by sshguard. This incompatibility might facilitate attackers' attempts to bypass intended access restrictions.

Recommendations: For pfSense version 2.4.4 1, consider adjusting the expiretable configuration to ensure compatibility with sshguard's block durations, thereby reinforcing access restrictions.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-20798

Affected Products

Pfsense

Sshguard

References · 3

• 🔥 https://redmine.pfsense.org/issues/9223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20798 · Security Note
• https://osv.dev/vulnerability/CVE-2018-20798 · Vendor Advisory