CVE-2019-5599

Опубликовано: 02 июл. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow unbounded and cause an expensive list traversal on every packet being processed, leading to resource exhaustion and a denial of service.

Ссылки

http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.html
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2019/06/17/5
Mailing List
Third Party Advisory
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md
Mitigation
Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193
Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/27
Mailing List
Mitigation
Patch
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.asc
Mitigation
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190625-0004/
Third Party Advisory
https://support.f5.com/csp/article/K75521003
Third Party Advisory
https://www.kb.cert.org/vuls/id/905115
Third Party Advisory
US Government Resource
http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.html
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2019/06/17/5
Mailing List
Third Party Advisory
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md
Mitigation
Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193
Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/27
Mailing List
Mitigation
Patch
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.asc
Mitigation
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190625-0004/
Third Party Advisory
https://support.f5.com/csp/article/K75521003
Third Party Advisory
https://www.kb.cert.org/vuls/id/905115
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09795

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVE-2019-5599

CVSS3: 7.5

debian

около 6 лет назад

In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-REL ...

GHSA-2c7c-f76h-r8hx

github

около 3 лет назад

BDU:2019-02197

CVSS3: 5.3

fstec