FreeBSD PF TCP Seq Validation DoS Before 14-RELEASE-p2
CVE-2023-6534 Published on December 13, 2023
In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.
Products Associated with CVE-2023-6534
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-6534 are published in FreeBSD:
Affected Versions
FreeBSD:- Version 14.0-RELEASE and below p2 is affected.
- Version 13.2-RELEASE and below p7 is affected.
- Version 12.4-RELEASE and below p9 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.