CVE-2023-4809

Katalog CVE

CVSS 7.5 · High EPSS 0,80%

Kerentanan Improper Handling of Additional Special Element pada freebsd. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is. As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host.

Rincian

Terbit di NVD

6 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-167: Improper Handling of Additional Special Element

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-23:10.pf.asc advisory vendor
• http://www.openwall.com/lists/oss-security/2023/09/08/5 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/09/08/6 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/09/08/7 mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20231221-0009/