Medium severity5.3NVD Advisory· Published Aug 9, 2018· Updated Jun 17, 2026
CVE-2018-6922
CVE-2018-6922
Description
One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to reassemble the data. This causes the CPU time spent on segment processing to grow linearly with the number of segments in the reassembly queue. An attacker who has the ability to send TCP traffic to a victim system can degrade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembly handling, with relatively small bandwidth cost.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- www.freebsd.org/security/advisories/FreeBSD-SA-18:08.tcp.ascnvdPatchVendor Advisory
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlnvdPatch
- www.securityfocus.com/bid/105058nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041425nvdThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20180815-0002/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.