In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | * | 11.2 (excluding) |
| Freebsd | Freebsd | 10.4 (including) | 10.4 (including) |
| Freebsd | Freebsd | 10.4-p13 (including) | 10.4-p13 (including) |
| Freebsd | Freebsd | 11.1-p15 (including) | 11.1-p15 (including) |
| Freebsd | Freebsd | 11.2-p4 (including) | 11.2-p4 (including) |