CVE-2018-6923

Published: Sep 4, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.

Affected (40)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.0
Freebsd Freebsd	Version 11.0
Freebsd Freebsd	Version 11.1
Freebsd Freebsd	Version 11.2
Freebsd Freebsd	Version 2.2
Freebsd Freebsd	Version 3.0
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.11
Freebsd Freebsd	Version 4.3
Freebsd Freebsd	Version 4.4
Freebsd Freebsd	Version 4.5
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.4
Freebsd Freebsd	Version 5.5
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 6.4
Freebsd Freebsd	Version 7.0
Freebsd Freebsd	Version 7.1
Freebsd Freebsd	Version 7.2
Freebsd Freebsd	Version 7.3
Freebsd Freebsd	Version 7.4
Freebsd Freebsd	Version 8.0
Freebsd Freebsd	Version 8.1
Freebsd Freebsd	Version 8.2
Freebsd Freebsd	Version 8.3
Freebsd Freebsd	Version 8.4
Freebsd Freebsd	Version 9.0
Freebsd Freebsd	Version 9.1
Freebsd Freebsd	Version 9.2
Freebsd Freebsd	Version 9.3