CVE-2023-6534

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6534

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers.  This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.

References
Link Resource
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:*
History

21 Nov 2024, 08:44

Type Values Removed Values Added
References () https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory () https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20240112-0007/ - () https://security.netapp.com/advisory/ntap-20240112-0007/ -
Information

Published : 2023-12-13 09:15

Updated : 2024-11-21 08:44

NVD link : CVE-2023-6534

Mitre link : CVE-2023-6534

CVE.ORG link : CVE-2023-6534

JSON object : View

Products Affected

freebsd

CWE
NVD-CWE-noinfo