CVE-2018-6925: Null Pointer Dereference
In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6925?
CVE-2018-6925 has a medium severity level due to its ability to be exploited by unprivileged authenticated local users.
How do I fix CVE-2018-6925?
To mitigate CVE-2018-6925, update your FreeBSD system to version 11.2-STABLE or later, or ensure that you are on the patched versions 11.2-RELEASE-p4, 11.1-RELEASE-p15, or 10.4-RELEASE-p13.
Who is affected by CVE-2018-6925?
CVE-2018-6925 affects unprivileged authenticated local users on FreeBSD versions prior to 11.2-STABLE and specific release patches.
What are the potential impacts of CVE-2018-6925 exploitation?
Exploitation of CVE-2018-6925 can lead to a NULL pointer dereference, potentially causing system instability or crashes.
Is CVE-2018-6925 a network-based vulnerability?
No, CVE-2018-6925 requires local access by an authenticated user, making it not a network-based vulnerability.