vulnerability
FreeBSD: VID-dca7ced0-2796-11e8-95ec-a4badb2f4699 (CVE-2018-6916): FreeBSD -- ipsec validation and use-after-free
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:N/C:P/I:P/A:C) | Mar 14, 2018 | Mar 15, 2018 | Dec 10, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:C)
Published
Mar 14, 2018
Added
Mar 15, 2018
Modified
Dec 10, 2025
Description
Problem Description: Due to a lack of strict checking, an attacker from a trusted host can send a specially constructed IP packet that may lead to a system crash. Additionally, a use-after-free vulnerability in the AH handling code could cause unpredictable results. Impact: Access to out of bounds or freed mbuf data can lead to a kernel panic or other unpredictable results.
Solutions
freebsd-upgrade-base-11_1-release-p7freebsd-upgrade-base-10_4-release-p7freebsd-upgrade-base-10_3-release-p28
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.