CVE-2019-5613

Published: Feb 18, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated.

Affected (12)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 12.0
Freebsd Freebsd	Version 12.0 p10
Freebsd Freebsd	Version 12.0 p11
Freebsd Freebsd	Version 12.0 p12
Freebsd Freebsd	Version 12.0 p1
Freebsd Freebsd	Version 12.0 p2
Freebsd Freebsd	Version 12.0 p3
Freebsd Freebsd	Version 12.0 p4
Freebsd Freebsd	Version 12.0 p6
Freebsd Freebsd	Version 12.0 p7
Freebsd Freebsd	Version 12.0 p8
Freebsd Freebsd	Version 12.0 p9

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:02.ipsec.asc

Source: secteam@freebsd.org

PatchVendor Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:02.ipsec.asc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.