CVE-2018-6922

State: Published
Severity: Not scored
Published: Aug 9, 2018
Updated: Sep 16, 2024
Reserved: Feb 12, 2018

Description

One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to reassemble the data. This causes the CPU time spent on segment processing to grow linearly with the number of segments in the reassembly queue. An attacker who has the ability to send TCP traffic to a victim system can degrade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembly handling, with relatively small bandwidth cost.

Scores

The record has no CVSS score.

Weaknesses

CWE-400 Uncontrolled Resource Consumption ('Resource Exhaustion')

Affected Products

Product	Versions
FreeBSDFreeBSD	All versions prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, 10.4-RELEASE-p10Affected

References

FreeBSD-SA-18:08vendor-advisory
1041425vdb-entry
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
105058vdb-entry
https://security.netapp.com/advisory/ntap-20180815-0002/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.