CVE-2018-6918 | BDVDB-2026-98906 Detail
FreeBSDFreeBSD
Description#
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securitytracker.com/id/1040628
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.asc
- http://www.securityfocus.com/bid/103666
- https://support.apple.com/kb/HT210090
- https://seclists.org/bugtraq/2019/May/77
- http://seclists.org/fulldisclosure/2019/Jun/6
- https://support.apple.com/kb/HT210091
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.