vulnerability

FreeBSD: VID-3d02520d-b309-11e9-a87f-a4badb2f4699 (CVE-2019-5597): FreeBSD -- IPv6 fragment reassembly panic in pf(4)

Try Surface Command
Back to search
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:P)
Published
Jul 30, 2019
Added
Jul 31, 2019
Modified
Dec 10, 2025

Description

Problem Description: A bug in the pf(4) IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of from the first packet. Impact: Malicious IPv6 packets with different IPv6 extensions could cause a kernel panic or potentially a filtering rule bypass.

Solutions

freebsd-upgrade-base-12_0-release-p4freebsd-upgrade-base-11_2-release-p10

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today