CVE-2022-23093 Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

fordham23

Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

VDB-214613 · CVE-2022-23093
FREEBSD 12.3/12.4/13.0/13.1 PING PR_PACK STACK-BASED OVERFLOW
https://vuldb.com/?id.214613

FreeBSD ^^^^.home.arpa 12.3-STABLE FreeBSD 12.3-STABLE plus-RELENG_22_05-n202700-3ddaea61055 pfSense arm64

Just curious, how easy it would be to selectively just patch ping to protect against this? Seems applicable to the freebsd version on my pfsense, but I am worried about other updates which might break my install.... any advice?

johnpoz

@fordham23 Searching forum is your friend

https://forum.netgate.com/post/1073281

fordham23

@johnpoz AH ok, sorry for the bother, but thank you for the reply!