CVE-2023-4809

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a...

FreeBSD : FreeBSD -- pf incorrectly handles multiple IPv6 fragment headers (d35373ae-4d34-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d35373ae-4d34-11ee-8e38-002590c1f29c advisory. - In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6...

CVE-2023-4809

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a...

CVE-2023-4809 pf incorrectly handles multiple IPv6 fragment headers

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a...

CVE-2023-4809

The CVE-2023-4809 issue affects FreeBSD pf: in a scrub fragment reassemble scenario, a packet carrying multiple IPv6 fragment headers can be reassembled and then misinterpreted as its payload, allowing IPv6 fragments to bypass pf rules that assume reassembly. Impact: fragmented packets may be for...

CVE-2023-4809: Improper Handling of Additional Special Element

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a...

glusterfs: fragment header infinite loop DoS

A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...