
13/12/2023

2/8/2024
CVE-2023-6534: TCP spoofing vulnerability in pf(4)
First published: Wed Dec 13 2023(Updated: )
In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.
Credit: secteam@freebsd.org
Affected Software | Affected Version | How to fix |
---|
FreeBSD Kernel | =12.4 | |
FreeBSD Kernel | =12.4-p1 | |
FreeBSD Kernel | =12.4-p2 | |
FreeBSD Kernel | =12.4-p3 | |
FreeBSD Kernel | =12.4-p4 | |
FreeBSD Kernel | =12.4-p5 | |
FreeBSD Kernel | =12.4-p6 | |
FreeBSD Kernel | =12.4-p7 | |
FreeBSD Kernel | =12.4-p8 | |
FreeBSD Kernel | =12.4-rc2-p1 | |
FreeBSD Kernel | =12.4-rc2-p2 | |
FreeBSD Kernel | =13.2 | |
FreeBSD Kernel | =13.2-p1 | |
FreeBSD Kernel | =13.2-p2 | |
FreeBSD Kernel | =13.2-p3 | |
FreeBSD Kernel | =13.2-p4 | |
FreeBSD Kernel | =13.2-p5 | |
FreeBSD Kernel | =13.2-p6 | |
FreeBSD Kernel | =14.0 | |
FreeBSD Kernel | =14.0-beta5 | |
FreeBSD Kernel | =14.0-p1 | |
FreeBSD Kernel | =14.0-rc3 | |
FreeBSD Kernel | =14.0-rc4-p1 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-6534?
CVE-2023-6534 has been classified as a denial-of-service vulnerability.
How do I fix CVE-2023-6534?
To fix CVE-2023-6534, upgrade to FreeBSD versions 12.4-RELEASE-p9, 13.2-RELEASE-p7, or 14.0-RELEASE-p2 or later.
Which versions of FreeBSD are affected by CVE-2023-6534?
CVE-2023-6534 affects FreeBSD versions 12.4 before p9, 13.2 before p7, and 14.0 before p2.
What kind of attack can CVE-2023-6534 lead to?
CVE-2023-6534 can be exploited to execute a denial-of-service attack against the affected systems.
When was CVE-2023-6534 disclosed?
CVE-2023-6534 was disclosed in October 2023.
- agent/type
- agent/first-publish-date
- agent/references
- agent/softwarecombine
- agent/severity
- agent/event
- agent/title
- agent/author
- agent/description
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/freebsd
- canonical/freebsd kernel
- version/freebsd kernel/12.4
- version/freebsd kernel/12.4-p1
- version/freebsd kernel/12.4-p2
- version/freebsd kernel/12.4-p3
- version/freebsd kernel/12.4-p4
- version/freebsd kernel/12.4-p5
- version/freebsd kernel/12.4-p6
- version/freebsd kernel/12.4-p7
- version/freebsd kernel/12.4-p8
- version/freebsd kernel/12.4-rc2-p1
- version/freebsd kernel/12.4-rc2-p2
- version/freebsd kernel/13.2
- version/freebsd kernel/13.2-p1
- version/freebsd kernel/13.2-p2
- version/freebsd kernel/13.2-p3
- version/freebsd kernel/13.2-p4
- version/freebsd kernel/13.2-p5
- version/freebsd kernel/13.2-p6
- version/freebsd kernel/14.0
- version/freebsd kernel/14.0-beta5
- version/freebsd kernel/14.0-p1
- version/freebsd kernel/14.0-rc3
- version/freebsd kernel/14.0-rc4-p1
Contact
SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.coBy using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203