CVE-2025-14769
In some cases, the handler may free the packet data and throw an error without halting the rule processing engine.
Published Mar 9, 2026 · updated Jun 17, 2026 · freebsd freebsd
In some cases, the handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously crafted packets sent from a remote host may result in a Denial of Service (DoS) if the directive is used and a subsequent rule would allow the traffic to pass.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 9, 2026 · NIST NVD
Detected
In some cases, the handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously crafted packets sent from a remote host may result in a Denial of Service (DoS) if the directive is used and a subsequent rule would allow the traffic to pa
Jun 17, 2026 · NIST NVD
Updated
In some cases, the handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously crafted packets sent from a remote host may result in a Denial of Service (DoS) if the directive is used and a subsequent rule would allow the traffic to pa
Affected
- cpe freebsd/freebsd13.5
Sources
- NIST NVDVulnerability recordCVE-2025-14769
In some cases, the handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously crafted packets sent
nvd.nist.gov