Authentication flaw

2020-04-0823:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.

CPENameOperatorVersion
freenas_firmwareeq11.2
freenas_firmwareeq11.2 u1
freenas_firmwareeq11.2 u2
freenas_firmwareeq11.2 u2.1
freenas_firmwareeq11.2 u3
freenas_firmwareeq11.2 u4
freenas_firmwareeq11.2 u4.1
freenas_firmwareeq11.2 u5
freenas_firmwareeq11.2 u5.1
freenas_firmwareeq11.2 u6

Name	Operator	Version
freenas_firmware	eq	11.2
freenas_firmware	eq	11.2 u1
freenas_firmware	eq	11.2 u2
freenas_firmware	eq	11.2 u2.1
freenas_firmware	eq	11.2 u3
freenas_firmware	eq	11.2 u4
freenas_firmware	eq	11.2 u4.1
freenas_firmware	eq	11.2 u5
freenas_firmware	eq	11.2 u5.1
freenas_firmware	eq	11.2 u6