pfSense 2.3.x < 2.3.5-p2 / 2.4.x < 2.4.3-p1 Multiple Vulnerabilities (SA-18_04 / SA-18_05)

According to its self-reported version number, the remote pfSense install is a version 2.3.x prior to 2.3.5-p2 or 2.4.x prior to 2.4.3-p1. It is, therefore, affected by multiple vulnerabilities: - In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of...

CVE-2018-6921

CVE-2018-6921 affects FreeBSD prior to 11.1-STABLE (r332066) and 11.1-RELEASE-p10, where memory copied to userland in the network subsystem was not initialized properly, allowing small amounts of privileged kernel data to be disclosed to unprivileged authenticated local users. Multiple downstream...