VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 8, 2023· Updated Jun 17, 2026

CVE-2023-5978

CVE-2023-5978

Description

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints.  When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed.  This could permit the application to resolve domain names that were previously restricted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • FreeBSD/FreeBSD8 versions
    cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*range: >=13.0,<13.2
    • cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:*
    • (no CPE)range: <13-RELEASE-p5
    • (no CPE)range: 13.2-RELEASE

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.