Remotely exploitable vulnerabilities in ipfw have been addressed in FreeBSD
The ipfw packet filter has fixed two vulnerabilities in the TCP options parsing code caused by improper data checks in processed network packets. The first vulnerability (CVE-2019-5614) when processing specifically crafted TCP packets could lead to memory access outside the allocated mbuf buffer, while the second (CVE-2019-15874) could result in accessing already freed memory areas (use-after-free). An analysis of the relevance of the identified issues for […]
