CVE-2018-6923

HIGH

FreeBSD - Denial of Service via IP Fragment Reassembly Resource Consumption

Title source: llm

Description

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105336

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041505

Mitigation, Vendor Advisory vendor-advisory x_refsource_freebsd

https://www.freebsd.org/security/advisories/FreeBSD-SA-18:10.ip.asc

Scores

CVSS v3 7.5

EPSS 0.0135

EPSS Percentile 80.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-400

Status published

Products (40)

freebsd/freebsd 2.2

freebsd/freebsd 3.0

freebsd/freebsd 4.3

freebsd/freebsd 4.4

freebsd/freebsd 4.5

freebsd/freebsd 4.6

freebsd/freebsd 4.7

freebsd/freebsd 4.8

freebsd/freebsd 4.9

freebsd/freebsd 4.10

... and 30 more

Published Sep 04, 2018

Tracked Since Feb 18, 2026