CVE-2018-20798

The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-03-01

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Pfsense (Netgate)

References

• https://redmine.pfsense.org/issues/9223