Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-5611

In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service.

Published

2019-08-30T09:15:20.943

Last Modified

2024-11-21T04:45:14.047

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.2 Yes
Operating System freebsd freebsd 11.3 Yes
Operating System freebsd freebsd 11.3 Yes
Operating System freebsd freebsd 11.3 Yes
Operating System freebsd freebsd 11.3 Yes
Operating System freebsd freebsd 11.3 Yes
Operating System freebsd freebsd 12.0 Yes
Operating System freebsd freebsd 12.0 Yes
Operating System freebsd freebsd 12.0 Yes
Operating System freebsd freebsd 12.0 Yes
Operating System freebsd freebsd 12.0 Yes
Operating System freebsd freebsd 12.0 Yes
Application netapp clustered_data_ontap - Yes
References