CVE-2023-6534

In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc	Vendor Advisory
https://security.netapp.com/advisory/ntap-20240112-0007/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:12.4:-::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p2::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p3::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p4::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p5::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p6::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p7::::::
	cpe:2.3:o:freebsd:freebsd:12.4:p8::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1::::::
	cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:-::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p1::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p2::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p3::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p4::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p5::::::
	cpe:2.3:o:freebsd:freebsd:13.2:p6::::::
	cpe:2.3:o:freebsd:freebsd:14.0:-::::::
	cpe:2.3:o:freebsd:freebsd:14.0:beta5::::::
	cpe:2.3:o:freebsd:freebsd:14.0:p1::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc3::::::
	cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1::::::

History

No history.

Information

Published : 2023-12-13 09:15

Updated : 2024-01-12 14:15

NVD link : CVE-2023-6534

Mitre link : CVE-2023-6534

CVE.ORG link : CVE-2023-6534

JSON object : View

Products Affected

freebsd

freebsd

CWE

NVD-CWE-noinfo

{"id": "CVE-2023-6534", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-12-13T09:15:34.680", "references": [{"url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc", "tags": ["Vendor Advisory"], "source": "secteam@freebsd.org"}, {"url": "https://security.netapp.com/advisory/ntap-20240112-0007/", "source": "secteam@freebsd.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. \u00a0This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall."}, {"lang": "es", "value": "En las versiones de FreeBSD 14.0-RELEASE anteriores a 14-RELEASE-p2, FreeBSD 13.2-RELEASE anteriores a 13.2-RELEASE-p7 y FreeBSD 12.4-RELEASE anteriores a 12.4-RELEASE-p9, el filtro de paquetes pf(4) valida incorrectamente los n\u00fameros de secuencia TCP. Esto podr\u00eda permitir que un actor malintencionado ejecute un ataque de denegaci\u00f3n de servicio contra hosts detr\u00e1s del firewall."}], "lastModified": "2024-01-12T14:15:49.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24920B4D-96C0-401F-B679-BEB086760EAF"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CE32730-A9F5-4E8D-BDA4-6B8232F84787"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "552E81DE-D409-475F-8ED0-E10A0BE43D29"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "251CAE22-C3E6-45AD-8301-F36BEE5C6860"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85D94BCA-FA32-4C10-95CD-5D2A69B38A7A"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C950F97-40B4-43BF-BB81-C49CE00A468B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FFBAD22-5712-472D-ADAF-13DE0826F888"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "888336D6-CA3C-45ED-90EA-C94A3146F1E9"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7314B63B-75AF-44EF-9F4C-DDF7A18B77E2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA821886-B26B-47A6-ABC9-B8F70CE0ACFB"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "220629AD-32CC-4303-86AE-1DD27F0E4C65"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A87EFA20-DD6B-41C5-98FD-A29F67D2E732"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2888B0C1-4D85-42EC-9696-03FAD0A9C28F"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3306F11-D3C0-41D6-BB5E-2ABDC3927715"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E584FE1-3A34-492B-B10F-508DA7CBA768"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5605E90-D125-4CC9-8B9F-F5EED9D4EE0C"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "761B4382-E857-4868-9F80-189B7F60256B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51B17801-15FD-4425-BA6C-BE06B14F1BFE"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA25530A-133C-4D7C-8993-D5C42D79A0B5"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB7B021E-F4AD-44AC-96AB-8ACAF8AB1B88"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69A72B5A-2189-4700-8E8B-1E5E7CA86C40"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "038E5B85-7F60-4D71-8D3F-EDBF6E036CE0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF309824-D379-4749-A1FA-BCB2987DD671"}], "operator": "OR"}]}], "sourceIdentifier": "secteam@freebsd.org"}