CVE-2018-6918

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.

• CWE-835

• http://seclists.org/fulldisclosure/2019/Jun/6
• http://www.securityfocus.com/bid/103666Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040628Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/77
• https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.ascVendor Advisory
• https://support.apple.com/kb/HT210090
• https://support.apple.com/kb/HT210091
• http://seclists.org/fulldisclosure/2019/Jun/6
• http://www.securityfocus.com/bid/103666Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040628Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/May/77
• https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.ascVendor Advisory
• https://support.apple.com/kb/HT210090
• https://support.apple.com/kb/HT210091

Published

Apr 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6911The VBWinExec function in Node\AspVBObj.dll in Advantech Web…
• CVE-2018-6912The decode_plane function in libavcodec/utvideodec.c in FFmp…
• CVE-2018-6913Heap-based buffer overflow in the pack function in Perl befo…
• CVE-2018-6914Directory traversal vulnerability in the Dir.mktmpdir method…
• CVE-2018-6916In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE,…
• CVE-2018-6917In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE,…
• CVE-2018-6919In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE,…
• CVE-2018-6920In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10…
• CVE-2018-6921In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10,…
• CVE-2018-6922One of the data structures that holds TCP segments in all ve…
• CVE-2018-6923In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE…
• CVE-2018-6924In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE…