CVE-2019-15874

Name of the Vulnerable Software and Affected Versions FreeBSD versions 12.1-STABLE before r356035 FreeBSD versions 12.1-RELEASE before 12.1-RELEASE-p4 FreeBSD versions 11.3-STABLE before r356036 FreeBSD versions 11.3-RELEASE before 11.3-RELEASE-p8

Description The issue is caused by incomplete packet data validation, which may result in memory access after it has been freed. This can lead to a kernel panic or other unpredictable results.

Recommendations For FreeBSD versions 12.1-STABLE before r356035, update to a version after r356035. For FreeBSD versions 12.1-RELEASE before 12.1-RELEASE-p4, update to 12.1-RELEASE-p4 or later. For FreeBSD versions 11.3-STABLE before r356036, update to a version after r356036. For FreeBSD versions 11.3-RELEASE before 11.3-RELEASE-p8, update to 11.3-RELEASE-p8 or later.