CVE-2023-5978

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

0.51%

Published

Nov 8, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed. This could permit the application to resolve domain names that were previously restricted.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-269

Affected Products (6)

freebsd · freebsd (up to 13.2)vulnerable

freebsd · freebsdvulnerable

References (4)

https://security.freebsd.org/advisories/FreeBSD-SA-23:16.cap_net.asc

Vendor Advisory

https://security.netapp.com/advisory/ntap-20231214-0003/

https://security.freebsd.org/advisories/FreeBSD-SA-23:16.cap_net.asc

Vendor Advisory

https://security.netapp.com/advisory/ntap-20231214-0003/

KEV Catalog EPSS Scores Vendors All CVEs