CVE-2023-6534

In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc	Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:12.4:-::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p2::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p3::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p4::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p5::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p6::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p7::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p8::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:-::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p1::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p3::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p4::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p5::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p6::::::
	cpe:2.3:o:freebsd:freebsd:14.0:-::::::
	cpe:2.3:o:freebsd:freebsd:14.0:beta5::::::
	cpe:2.3:o:freebsd:freebsd:14.0:p1::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc3::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1::::::

History

12 Jan 2024, 14:15

Type	Values Removed	Values Added
References		() https://security.netapp.com/advisory/ntap-20240112-0007/ -

19 Dec 2023, 15:27

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
First Time		Freebsd Freebsd freebsd
References	~~() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc -~~	() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
CPE		cpe:2.3:o:freebsd:freebsd:12.4:-:::::: cpe:2.3:o:freebsd:freebsd:14.0:-:::::: cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:::::: cpe:2.3:o:freebsd:freebsd:13.2:p3:::::: cpe:2.3:o:freebsd:freebsd:12.4:p6:::::: cpe:2.3:o:freebsd:freebsd:12.4:p2:::::: cpe:2.3:o:freebsd:freebsd:13.2:p6:::::: cpe:2.3:o:freebsd:freebsd:12.4:p1:::::: cpe:2.3:o:freebsd:freebsd:13.2:-:::::: cpe:2.3:o:freebsd:freebsd:12.4:p8:::::: cpe:2.3:o:freebsd:freebsd:12.4:p4:::::: cpe:2.3:o:freebsd:freebsd:12.4:p7:::::: cpe:2.3:o:freebsd:freebsd:13.2:p4:::::: cpe:2.3:o:freebsd:freebsd:13.2:p2:::::: cpe:2.3:o:freebsd:freebsd:12.4:p5:::::: cpe:2.3:o:freebsd:freebsd:12.4:p3:::::: cpe:2.3:o:freebsd:freebsd:14.0:rc3:::::: cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:::::: cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:::::: cpe:2.3:o:freebsd:freebsd:14.0:beta5:::::: cpe:2.3:o:freebsd:freebsd:13.2:p1:::::: cpe:2.3:o:freebsd:freebsd:13.2:p5:::::: cpe:2.3:o:freebsd:freebsd:14.0:p1::::::

13 Dec 2023, 13:35

Type	Values Removed	Values Added
Summary		(es) En las versiones de FreeBSD 14.0-RELEASE anteriores a 14-RELEASE-p2, FreeBSD 13.2-RELEASE anteriores a 13.2-RELEASE-p7 y FreeBSD 12.4-RELEASE anteriores a 12.4-RELEASE-p9, el filtro de paquetes pf(4) valida incorrectamente los números de secuencia TCP. Esto podría permitir que un actor malintencionado ejecute un ataque de denegación de servicio contra hosts detrás del firewall.

13 Dec 2023, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-13 09:15

Updated : 2024-01-12 14:15

NVD link : CVE-2023-6534

Mitre link : CVE-2023-6534

CVE.ORG link : CVE-2023-6534

JSON object : View

Products Affected

freebsd

freebsd

CWE

NVD-CWE-noinfo

7.5 /10