PT-2019-17769 · Freebsd · Freebsd

Luca Moro + 1 · Published 2019-05-14 · Updated 2025-04-03 · CVE-2019-5598

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions 11.3-PRERELEASE before r345378 FreeBSD versions 12.0-STABLE before r345377 FreeBSD versions 11.2-RELEASE before 11.2-RELEASE-p10 FreeBSD versions 12.0-RELEASE before 12.0-RELEASE-p4

Description A bug in the pf component of FreeBSD does not properly check if the outer ICMP or ICMP6 packet has the same destination IP as the source IP of the inner protocol packet. This allows a maliciously crafted ICMP/ICMP6 packet to bypass packet filter rules and be passed to a host that would otherwise be unavailable.

Recommendations For FreeBSD versions 11.3-PRERELEASE before r345378, update to a version after r345378. For FreeBSD versions 12.0-STABLE before r345377, update to a version after r345377. For FreeBSD versions 11.2-RELEASE before 11.2-RELEASE-p10, update to 11.2-RELEASE-p10 or later. For FreeBSD versions 12.0-RELEASE before 12.0-RELEASE-p4, update to 12.0-RELEASE-p4 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-5598

FREEBSD-SA-19_06

Affected Products

Freebsd

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2019-5598 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5598 · Vendor Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-19:06.pf.asc · Vendor Advisory
• http://securityfocus.com/bid/108395 · Note
• https://synacktiv.com/posts/systems/icmp-reachable.html · Note
• http://packetstormsecurity.com/files/152934/FreeBSD-Security-Advisory-FreeBSD-SA-19-06.pf.html · Note
• https://t.me/cvenotify/117514 · Telegram Post
• https://security.netapp.com/advisory/ntap-20190611-0001 · Note
• http://seclists.org/fulldisclosure/2025/Apr/1 · Note
• https://oracle.com/technetwork/security-advisory/cpujul2019-5072835.html · Note