CVE-2019-5597

Name	CVE-2019-5597
Description	In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
kfreebsd-10 (PTS)	jessie	10.1~svn274115-4	vulnerable
	stretch	10.3~svn300087-3	vulnerable
	buster	10.3~svn300087-5	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
kfreebsd-10	source	(unstable)	(unfixed)	unimportant

https://security.FreeBSD.org/advisories/FreeBSD-SA-19:05.pf.asc
kfreebsd not covered by security support