Vulnerability Description
In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed. This could permit the application to resolve domain names that were previously restricted.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | >= 13.0, < 13.2 |
Related Weaknesses (CWE)
References
- https://security.freebsd.org/advisories/FreeBSD-SA-23:16.cap_net.ascVendor Advisory
- https://security.netapp.com/advisory/ntap-20231214-0003/
- https://security.freebsd.org/advisories/FreeBSD-SA-23:16.cap_net.ascVendor Advisory
- https://security.netapp.com/advisory/ntap-20231214-0003/
FAQ
What is CVE-2023-5978?
CVE-2023-5978 is a vulnerability with a CVSS score of 7.5 (HIGH). In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active c...
How severe is CVE-2023-5978?
CVE-2023-5978 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5978?
Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd.