CVE-2018-6925

Published: Sep 28, 2018Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.

Affected (5)

Products: Freebsd: Freebsd

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Before 11.2
Freebsd Freebsd	Version 10.4
Freebsd Freebsd	Version 10.4 p13
Freebsd Freebsd	Version 11.1 p15
Freebsd Freebsd	Version 11.2 p4

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://security.FreeBSD.org/advisories/FreeBSD-EN-18:11.listen.asc

Source: secteam@freebsd.org

PatchVendor Advisory

https://www.flexera.com/company/secunia-research/advisories/SR-2018-21.html

Source: secteam@freebsd.org

https://security.FreeBSD.org/advisories/FreeBSD-EN-18:11.listen.asc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.flexera.com/company/secunia-research/advisories/SR-2018-21.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.