CVEvulnerability

CVE-2018-6923

7.5 HIGH Published 2018-09-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.

Affected configurations

• freebsd freebsd 2.2 • freebsd freebsd 3.0 • freebsd freebsd 4.3 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 4.10 • freebsd freebsd 4.11 • freebsd freebsd 5.0 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.3 • freebsd freebsd 5.4 • freebsd freebsd 5.5 • freebsd freebsd 6.0 • freebsd freebsd 6.1 • freebsd freebsd 6.2 • freebsd freebsd 6.3 • freebsd freebsd 6.4 • freebsd freebsd 7.0 • freebsd freebsd 7.1 • freebsd freebsd 7.2 • freebsd freebsd 7.3 • freebsd freebsd 7.4 • freebsd freebsd 8.0 • freebsd freebsd 8.1 • freebsd freebsd 8.2 • freebsd freebsd 8.3 • freebsd freebsd 8.4 • freebsd freebsd 9.0 • freebsd freebsd 9.1 • freebsd freebsd 9.2 • freebsd freebsd 9.3 • freebsd freebsd 10.0 • freebsd freebsd 11.0 • freebsd freebsd 11.1 • freebsd freebsd 11.2

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References