{"id":"CVE-2018-6918","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-6918","generatedAt":"2026-10-29T03:02:03.273Z","title":"This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.","description":"In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.","published":"2018-04-04T14:29:00.000Z","lastModified":"2026-06-17T02:02:28.000Z","status":"Modified","sourceIdentifier":"secteam@freebsd.org","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-835"],"affected":["freebsd/freebsd"],"epss":{"score":0.04209,"percentile":0.90921,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (4.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2019/Jun/6","source":"secteam@freebsd.org"},{"url":"http://www.securityfocus.com/bid/103666","tags":["Third Party Advisory","VDB Entry"],"source":"secteam@freebsd.org"},{"url":"http://www.securitytracker.com/id/1040628","tags":["Third Party Advisory","VDB Entry"],"source":"secteam@freebsd.org"},{"url":"https://seclists.org/bugtraq/2019/May/77","source":"secteam@freebsd.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.asc","tags":["Vendor Advisory"],"source":"secteam@freebsd.org"},{"url":"https://support.apple.com/kb/HT210090","source":"secteam@freebsd.org"},{"url":"https://support.apple.com/kb/HT210091","source":"secteam@freebsd.org"},{"url":"http://seclists.org/fulldisclosure/2019/Jun/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/103666","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040628","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/May/77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.asc","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT210090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT210091","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-6918","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}