CVE-2019-5597: Input Validation

Published May 15, 2019

Updated

In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter.

Affected Software

11 affected components

FreeBSD FreeBSD=11.2

FreeBSD FreeBSD=11.2-p2

FreeBSD FreeBSD=11.2-p3

FreeBSD FreeBSD=11.2-p4

FreeBSD FreeBSD=11.2-p5

FreeBSD FreeBSD=11.2-p6

FreeBSD FreeBSD=11.2-p7

FreeBSD FreeBSD=11.2-p9

FreeBSD FreeBSD=12.0

FreeBSD FreeBSD=12.0-p1

FreeBSD FreeBSD=12.0-p3

Remediation

Patch Available

https://security.FreeBSD.org/advisories/FreeBSD-SA-19:05.pf.asc

Event History

May 15, 2019

CVE Published

via MITRE·03:27 PM

Data Sourced

via MITRE·03:27 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5597?

CVE-2019-5597 has been classified as a medium severity vulnerability due to its potential impact on processing IPv6 packets.

How do I fix CVE-2019-5597?

To fix CVE-2019-5597, update your FreeBSD installation to version 11.2-RELEASE-p10, 12.0-RELEASE-p4, or later versions.

What versions of FreeBSD are affected by CVE-2019-5597?

CVE-2019-5597 affects FreeBSD versions 11.2-RELEASE before 11.2-RELEASE-p10 and 12.0-RELEASE before 12.0-RELEASE-p4.

What type of vulnerability is CVE-2019-5597?

CVE-2019-5597 is a bug in the pf IPv6 fragment reassembly logic that can lead to improper handling of network packets.

Is there any workaround for CVE-2019-5597?

There are no known effective workarounds for CVE-2019-5597, so applying the appropriate software update is recommended.