Input validation error in FreeBSD - CVE-2019-5611
Published: August 21, 2019
Vulnerability identifier: #VU20354
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-5611
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a missing check in the code of m_pulldown(9) when processing IPv6 packets. A remote attacker can send specially crafted IPv6 traffic to the affected system and perform denial of service (DoS) attack.
Affected software
FreeBSD
EMC Isilon OneFS
PowerScale OneFS
EMC Isilon OneFS
PowerScale OneFS
How to mitigate CVE-2019-5611
Install updates from vendor's website.