Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-4809 | 1 Freebsd | 1 Freebsd | 2023-12-21 | N/A | 7.5 HIGH |
In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is. As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host. | |||||
CVE-2023-3580 | 1 Squidex.io | 1 Squidex | 2023-07-18 | N/A | 4.3 MEDIUM |
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. | |||||
CVE-2023-0643 | 1 Squidex.io | 1 Squidex | 2023-02-09 | N/A | 6.1 MEDIUM |
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. |