Null pointer dereference

2018-09-2813:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.

CPENameOperatorVersion
freebsdeq10.4
freebsdlt11.2
freebsdeq11.1 p15
freebsdeq11.2 p4
freebsdeq10.4 p13

Name	Operator	Version
freebsd	eq	10.4
freebsd	lt	11.2
freebsd	eq	11.1 p15
freebsd	eq	11.2 p4
freebsd	eq	10.4 p13

References

security.FreeBSD.org/advisories/FreeBSD-EN-18:11.listen.asc

www.flexera.com/company/secunia-research/advisories/SR-2018-21.html