Lucene search

[email protected]NVD:CVE-2023-6534

HistoryDec 13, 2023 - 9:15 a.m.

CVE-2023-6534

2023-12-1309:15:34

[email protected]

web.nvd.nist.gov

freebsd

pf(4)

tcp

sequence

validation

vulnerability

denial-of-service

attack

firewall

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.

Affected configurations

Nvd

Node

freebsdfreebsdMatch12.4-

freebsdfreebsdMatch12.4p1

freebsdfreebsdMatch12.4p2

freebsdfreebsdMatch12.4p3

freebsdfreebsdMatch12.4p4

freebsdfreebsdMatch12.4p5

freebsdfreebsdMatch12.4p6

freebsdfreebsdMatch12.4p7

freebsdfreebsdMatch12.4p8

freebsdfreebsdMatch12.4rc2-p1

freebsdfreebsdMatch12.4rc2-p2

freebsdfreebsdMatch13.2-

freebsdfreebsdMatch13.2p1

freebsdfreebsdMatch13.2p2

freebsdfreebsdMatch13.2p3

freebsdfreebsdMatch13.2p4

freebsdfreebsdMatch13.2p5

freebsdfreebsdMatch13.2p6

freebsdfreebsdMatch14.0-

freebsdfreebsdMatch14.0beta5

freebsdfreebsdMatch14.0p1

freebsdfreebsdMatch14.0rc3

freebsdfreebsdMatch14.0rc4-p1

VendorProductVersionCPE
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:*
freebsdfreebsd12.4cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:-::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p1::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p2::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p3::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p4::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p5::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p6::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p7::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:p8::::::
freebsd	freebsd	12.4	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1::::::