pfSense 2.3.x <= 2.3.5-p2 / 2.4.x < 2.4.4 Multiple Vulnerabilities (SA-18_06 / SA-18_07 / SA-18_08)

According to its self-reported version number, the remote pfSense install is a version 2.3.x prior or equal to 2.3.5-p2 or 2.4.x prior to 2.4.3-p1. It is, therefore, affected by multiple vulnerabilities: - Systems with microprocessors utilizing speculative execution and address translations may...

CVE-2018-6923

CVE-2018-6923 affects FreeBSD versions prior to 11.1-STABLE, 11.2-RELEASE-p2, and 11.1-RELEASE-p13. The issue is in the IP fragment reassembly code and can allow a remote attacker that can send arbitrary IP fragments to cause denial of service through excessive resource consumption. The primary p...