CVE-2023-6534

In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc	Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc	Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:12.4:-::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p2::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p3::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p4::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p5::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p6::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p7::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p8::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:-::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p1::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p3::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p4::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p5::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p6::::::
	cpe:2.3:o:freebsd:freebsd:14.0:-::::::
	cpe:2.3:o:freebsd:freebsd:14.0:beta5::::::
	cpe:2.3:o:freebsd:freebsd:14.0:p1::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc3::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1::::::

History

21 Nov 2024, 08:44

Type	Values Removed	Values Added
References	~~() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory~~	() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory
References	~~() https://security.netapp.com/advisory/ntap-20240112-0007/ -~~	() https://security.netapp.com/advisory/ntap-20240112-0007/ -

12 Jan 2024, 14:15

Type	Values Removed	Values Added
References		() https://security.netapp.com/advisory/ntap-20240112-0007/ -

19 Dec 2023, 15:27

Type	Values Removed	Values Added
CPE		cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:::::: cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:::::: cpe:2.3:o:freebsd:freebsd:12.4:p6:::::: cpe:2.3:o:freebsd:freebsd:14.0:p1:::::: cpe:2.3:o:freebsd:freebsd:12.4:p3:::::: cpe:2.3:o:freebsd:freebsd:13.2:p3:::::: cpe:2.3:o:freebsd:freebsd:12.4:p1:::::: cpe:2.3:o:freebsd:freebsd:13.2:p6:::::: cpe:2.3:o:freebsd:freebsd:13.2:p5:::::: cpe:2.3:o:freebsd:freebsd:12.4:p7:::::: cpe:2.3:o:freebsd:freebsd:12.4:p5:::::: cpe:2.3:o:freebsd:freebsd:12.4:p8:::::: cpe:2.3:o:freebsd:freebsd:14.0:-:::::: cpe:2.3:o:freebsd:freebsd:14.0:rc3:::::: cpe:2.3:o:freebsd:freebsd:12.4:p4:::::: cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:::::: cpe:2.3:o:freebsd:freebsd:12.4:-:::::: cpe:2.3:o:freebsd:freebsd:12.4:p2:::::: cpe:2.3:o:freebsd:freebsd:13.2:p2:::::: cpe:2.3:o:freebsd:freebsd:13.2:-:::::: cpe:2.3:o:freebsd:freebsd:13.2:p1:::::: cpe:2.3:o:freebsd:freebsd:13.2:p4:::::: cpe:2.3:o:freebsd:freebsd:14.0:beta5::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
First Time		Freebsd Freebsd freebsd
CWE		NVD-CWE-noinfo
References	~~() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc -~~	() https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc - Vendor Advisory

13 Dec 2023, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-13 09:15

Updated : 2024-11-21 08:44

NVD link : CVE-2023-6534

Mitre link : CVE-2023-6534

CVE.ORG link : CVE-2023-6534

JSON object : View

Products Affected

freebsd

freebsd

CWE

NVD-CWE-noinfo

7.5 /10