CVE-2018-20798: High severity netgate pfsense community edition vulnerability
Published Mar 1, 2019
·Updated
The expiretable configuration in pfSense 2.4.41 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.
Affected Software
1 affected component
Netgate pfSense=2.4.4-p1
Remediation
Patch Available
Event History
Mar 1, 2019
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-20798?
CVE-2018-20798 is a vulnerability that affects pfSense 2.4.4_1 and allows attackers to bypass access restrictions.
2
How does CVE-2018-20798 impact pfSense?
CVE-2018-20798 establishes block durations that are incompatible with sshguard's block durations, making it easier for attackers to bypass access restrictions.
3
What is the severity of CVE-2018-20798?
CVE-2018-20798 has a severity rating of 7.5 (high).
4
How can I fix CVE-2018-20798?
To fix CVE-2018-20798, upgrade pfSense to version 2.4.4-p1 or newer.
5
Where can I find more information about CVE-2018-20798?
You can find more detailed information about CVE-2018-20798 at the following reference: https://redmine.pfsense.org/issues/9223