High severity7.5NVD Advisory· Published Apr 4, 2018· Updated Jun 17, 2026

CVE-2018-6918

Description

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDllm-fuzzy2 versions
<11.1-STABLE, <11.1-RELEASE-p9, <10.4-STABLE, <10.4-RELEASE-p8, <10.3-RELEASE-p28+ 1 more
- (no CPE)range: <11.1-STABLE, <11.1-RELEASE-p9, <10.4-STABLE, <10.4-RELEASE-p8, <10.3-RELEASE-p28
- (no CPE)range: All supported versions of FreeBSD.

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103666nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040628nvdThird Party AdvisoryVDB Entry
security.freebsd.org/advisories/FreeBSD-SA-18:05.ipsec.ascnvdVendor Advisory
seclists.org/fulldisclosure/2019/Jun/6nvd
seclists.org/bugtraq/2019/May/77nvd
support.apple.com/kb/HT210090nvd
support.apple.com/kb/HT210091nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000