Double free

2018-03-0915:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

JSON

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system crash or other unpredictable results.

CPENameOperatorVersion
freebsdeq10.4
freebsdeq10.4 p7
freebsdeq10.3 p28
freebsdge11.0
freebsdlt11.1

Name	Operator	Version
freebsd	eq	10.4
freebsd	eq	10.4 p7
freebsd	eq	10.3 p28
freebsd	ge	11.0
freebsd	lt	11.1

References

www.securitytracker.com/id/1040460

www.freebsd.org/security/advisories/FreeBSD-SA-18:01.ipsec.asc