CVE-2019-5613

In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
freebsdCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
VendorProductVersion
freebsdfreebsd
12.0
freebsdfreebsd
12.0:p1
freebsdfreebsd
12.0:p10
freebsdfreebsd
12.0:p11
freebsdfreebsd
12.0:p12
freebsdfreebsd
12.0:p2
freebsdfreebsd
12.0:p3
freebsdfreebsd
12.0:p4
freebsdfreebsd
12.0:p6
freebsdfreebsd
12.0:p7
freebsdfreebsd
12.0:p8
freebsdfreebsd
12.0:p9
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kfreebsd-10
eoan
dne
bionic
dne
xenial
dne
trusty
dne
Common Weakness Enumeration
References
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:02.ipsec.asc
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:02.ipsec.asc