CVE-2023-6534 - Vulnerability Details

Vendors	Products
Freebsd	Freebsd

Link	Providers
https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc
https://security.netapp.com/advisory/ntap-20240112-0007/

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-6534", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "state": "PUBLISHED", "assignerShortName": "freebsd", "dateReserved": "2023-12-05T19:03:31.535Z", "datePublished": "2023-12-13T08:12:14.616Z", "dateUpdated": "2025-02-13T17:26:26.737Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "modules": ["pf"], "product": "FreeBSD", "vendor": "FreeBSD", "versions": [{"lessThan": "p2", "status": "affected", "version": "14.0-RELEASE", "versionType": "release"}, {"lessThan": "p7", "status": "affected", "version": "13.2-RELEASE", "versionType": "release"}, {"lessThan": "p9", "status": "affected", "version": "12.4-RELEASE", "versionType": "release"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Yuxiang Yang, Ao Wang, Xuewei Feng, Qi Li and Ke Xu from Tsinghua University"}], "datePublic": "2023-12-05T22:00:00.000Z", "descriptions": [{"lang": "en", "value": "In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. \u00a0This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall."}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2024-01-12T14:06:22.880Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc"}, {"url": "https://security.netapp.com/advisory/ntap-20240112-0007/"}], "source": {"discovery": "UNKNOWN"}, "title": "TCP spoofing vulnerability in pf(4)", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:35:14.417Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc"}, {"url": "https://security.netapp.com/advisory/ntap-20240112-0007/", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-6534 (string)

assignerOrgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

state : PUBLISHED (string)

assignerShortName : freebsd (string)

dateReserved : 2023-12-05T19:03:31.535Z (string)

datePublished : 2023-12-13T08:12:14.616Z (string)

dateUpdated : 2025-02-13T17:26:26.737Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unknown (string)

modules : [ »

0 : pf (string)

]

product : FreeBSD (string)

vendor : FreeBSD (string)

versions : [ »

0 : { »

lessThan : p2 (string)

status : affected (string)

version : 14.0-RELEASE (string)

versionType : release (string)

}

1 : { »

lessThan : p7 (string)

status : affected (string)

version : 13.2-RELEASE (string)

versionType : release (string)

}

2 : { »

lessThan : p9 (string)

status : affected (string)

version : 12.4-RELEASE (string)

versionType : release (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

user : 00000000-0000-4000-9000-000000000000 (string)

value : Yuxiang Yang, Ao Wang, Xuewei Feng, Qi Li and Ke Xu from Tsinghua University (string)

}

]

datePublic : 2023-12-05T22:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

value : In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall. (string)

}

]

providerMetadata : { »

orgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

shortName : freebsd (string)

dateUpdated : 2024-01-12T14:06:22.880Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

]

url : https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc (string)

}

1 : { »

url : https://security.netapp.com/advisory/ntap-20240112-0007/ (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : TCP spoofing vulnerability in pf(4) (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T08:35:14.417Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc (string)

}

1 : { »

url : https://security.netapp.com/advisory/ntap-20240112-0007/ (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*", "matchCriteriaId": "24920B4D-96C0-401F-B679-BEB086760EAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:*", "matchCriteriaId": "3CE32730-A9F5-4E8D-BDA4-6B8232F84787", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:*", "matchCriteriaId": "552E81DE-D409-475F-8ED0-E10A0BE43D29", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:*", "matchCriteriaId": "251CAE22-C3E6-45AD-8301-F36BEE5C6860", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:*", "matchCriteriaId": "85D94BCA-FA32-4C10-95CD-5D2A69B38A7A", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:*", "matchCriteriaId": "8C950F97-40B4-43BF-BB81-C49CE00A468B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:*", "matchCriteriaId": "8FFBAD22-5712-472D-ADAF-13DE0826F888", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:*", "matchCriteriaId": "888336D6-CA3C-45ED-90EA-C94A3146F1E9", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:*", "matchCriteriaId": "7314B63B-75AF-44EF-9F4C-DDF7A18B77E2", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*", "matchCriteriaId": "BA821886-B26B-47A6-ABC9-B8F70CE0ACFB", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*", "matchCriteriaId": "220629AD-32CC-4303-86AE-1DD27F0E4C65", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:*", "matchCriteriaId": "A87EFA20-DD6B-41C5-98FD-A29F67D2E732", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:*", "matchCriteriaId": "2888B0C1-4D85-42EC-9696-03FAD0A9C28F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:*", "matchCriteriaId": "A3306F11-D3C0-41D6-BB5E-2ABDC3927715", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:*", "matchCriteriaId": "9E584FE1-3A34-492B-B10F-508DA7CBA768", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:*", "matchCriteriaId": "A5605E90-D125-4CC9-8B9F-F5EED9D4EE0C", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:*", "matchCriteriaId": "761B4382-E857-4868-9F80-189B7F60256B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:*", "matchCriteriaId": "51B17801-15FD-4425-BA6C-BE06B14F1BFE", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:*", "matchCriteriaId": "FA25530A-133C-4D7C-8993-D5C42D79A0B5", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:*", "matchCriteriaId": "DB7B021E-F4AD-44AC-96AB-8ACAF8AB1B88", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:*", "matchCriteriaId": "69A72B5A-2189-4700-8E8B-1E5E7CA86C40", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "038E5B85-7F60-4D71-8D3F-EDBF6E036CE0", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:*", "matchCriteriaId": "BF309824-D379-4749-A1FA-BCB2987DD671", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. \u00a0This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall."}, {"lang": "es", "value": "En las versiones de FreeBSD 14.0-RELEASE anteriores a 14-RELEASE-p2, FreeBSD 13.2-RELEASE anteriores a 13.2-RELEASE-p7 y FreeBSD 12.4-RELEASE anteriores a 12.4-RELEASE-p9, el filtro de paquetes pf(4) valida incorrectamente los n\u00fameros de secuencia TCP. Esto podr\u00eda permitir que un actor malintencionado ejecute un ataque de denegaci\u00f3n de servicio contra hosts detr\u00e1s del firewall."}], "id": "CVE-2023-6534", "lastModified": "2024-11-21T08:44:02.973", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-12-13T09:15:34.680", "references": [{"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc"}, {"source": "secteam@freebsd.org", "url": "https://security.netapp.com/advisory/ntap-20240112-0007/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20240112-0007/"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:* (string)

matchCriteriaId : 24920B4D-96C0-401F-B679-BEB086760EAF (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:* (string)

matchCriteriaId : 3CE32730-A9F5-4E8D-BDA4-6B8232F84787 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:* (string)

matchCriteriaId : 552E81DE-D409-475F-8ED0-E10A0BE43D29 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:* (string)

matchCriteriaId : 251CAE22-C3E6-45AD-8301-F36BEE5C6860 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:* (string)

matchCriteriaId : 85D94BCA-FA32-4C10-95CD-5D2A69B38A7A (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:* (string)

matchCriteriaId : 8C950F97-40B4-43BF-BB81-C49CE00A468B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:* (string)

matchCriteriaId : 8FFBAD22-5712-472D-ADAF-13DE0826F888 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:* (string)

matchCriteriaId : 888336D6-CA3C-45ED-90EA-C94A3146F1E9 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:* (string)

matchCriteriaId : 7314B63B-75AF-44EF-9F4C-DDF7A18B77E2 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:* (string)

matchCriteriaId : BA821886-B26B-47A6-ABC9-B8F70CE0ACFB (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:* (string)

matchCriteriaId : 220629AD-32CC-4303-86AE-1DD27F0E4C65 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:* (string)

matchCriteriaId : A87EFA20-DD6B-41C5-98FD-A29F67D2E732 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:* (string)

matchCriteriaId : 2888B0C1-4D85-42EC-9696-03FAD0A9C28F (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:* (string)

matchCriteriaId : A3306F11-D3C0-41D6-BB5E-2ABDC3927715 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:* (string)

matchCriteriaId : 9E584FE1-3A34-492B-B10F-508DA7CBA768 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:* (string)

matchCriteriaId : A5605E90-D125-4CC9-8B9F-F5EED9D4EE0C (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:* (string)

matchCriteriaId : 761B4382-E857-4868-9F80-189B7F60256B (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:* (string)

matchCriteriaId : 51B17801-15FD-4425-BA6C-BE06B14F1BFE (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:* (string)

matchCriteriaId : FA25530A-133C-4D7C-8993-D5C42D79A0B5 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:* (string)

matchCriteriaId : DB7B021E-F4AD-44AC-96AB-8ACAF8AB1B88 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:* (string)

matchCriteriaId : 69A72B5A-2189-4700-8E8B-1E5E7CA86C40 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:* (string)

matchCriteriaId : 038E5B85-7F60-4D71-8D3F-EDBF6E036CE0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:* (string)

matchCriteriaId : BF309824-D379-4749-A1FA-BCB2987DD671 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall. (string)

}

1 : { »

lang : es (string)

value : En las versiones de FreeBSD 14.0-RELEASE anteriores a 14-RELEASE-p2, FreeBSD 13.2-RELEASE anteriores a 13.2-RELEASE-p7 y FreeBSD 12.4-RELEASE anteriores a 12.4-RELEASE-p9, el filtro de paquetes pf(4) valida incorrectamente los números de secuencia TCP. Esto podría permitir que un actor malintencionado ejecute un ataque de denegación de servicio contra hosts detrás del firewall. (string)

}

]

id : CVE-2023-6534 (string)

lastModified : 2024-11-21T08:44:02.973 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-12-13T09:15:34.680 (string)

references : [ »

0 : { »

source : secteam@freebsd.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc (string)

}

1 : { »

source : secteam@freebsd.org (string)

url : https://security.netapp.com/advisory/ntap-20240112-0007/ (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://security.netapp.com/advisory/ntap-20240112-0007/ (string)

}

]

sourceIdentifier : secteam@freebsd.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object