Back
CVE-2019-5597
In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4,…
Critical9.1EPSS 3.7%
- Published
- Updated
- Reserved
- Assigned by
- freebsd
Description
In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | Critical9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
- EPSS (exploitation in 30 days)
- 3.7% · top 10% of all CVEs (5 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.1.
Weakness
- Improper Check for Unusual or Exceptional Conditions
- CWE-20 (opens in a new tab)All about CWE-20 and its CVEs
Affected products
FreeBSD
- affected FreeBSD 11.2 before 11.2-RELEASE-p10 and 12.0 before 12.0-RELEASE-p4
References (6)
- https://security.FreeBSD.org/advisories/FreeBSD-SA-19:05.pf.asc (opens in a new tab)x_refsource_MISCx_transferred
- https://www.synacktiv.com/ressources/Synacktiv_OpenBSD_PacketFilter_CVE-2019-5597_ipv6_frag.pdf (opens in a new tab)x_refsource_MISCx_transferred
- http://packetstormsecurity.com/files/152933/FreeBSD-Security-Advisory-FreeBSD-SA-19-05.pf.html (opens in a new tab)x_refsource_MISCx_transferred
- 108395 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://security.netapp.com/advisory/ntap-20190611-0001/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-5597)Record last updated .