Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-6925

In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.

  • Published: Sep 28, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-6925
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:L/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
freebsd / freebsd 10.4 10.4.x
freebsd / freebsd - 11.2
freebsd / freebsd 11.1-p15 11.1-p15.x
freebsd / freebsd 11.2-p4 11.2-p4.x
freebsd / freebsd 10.4-p13 10.4-p13.x