High severity7.5NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026
CVE-2023-6534
CVE-2023-6534
Description
In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers. This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*+ 24 more
- cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:*
- (no CPE)range: <14-RELEASE-p2, <13.2-RELEASE-p7, <12.4-RELEASE-p9
- (no CPE)range: 14.0-RELEASE
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.