CVE-2025-14769 - CVE House
Back to Database
Status published Unknown CVE-2025-14769

ipfw denial of service

Vulnerability Description

In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously crafted packets sent from a remote host may result in a Denial of Service (DoS) if the `tcp-setmss` directive is used and a subsequent rule would allow the traffic to pass.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14769

Credits & Attribution

No credits recorded in the NVD database.

References

More from FreeBSD

View All →
CVE-2025-24934
SO_REUSEPORT_LB breaks connect(2) for UDP sockets
Unknown 0
CVE-2025-15576
Jail chroot escape via fd exchange with a different jail
Unknown 0
CVE-2025-15547
Jail escape by a privileged user via nullfs
Unknown 0
CVE-2025-14558
Remote code execution via ND6 Router Advertisements
Unknown 0
CVE-2025-0662
Uninitialized kernel memory disclosure via ktrace(2)
Unknown 0

Affected Vendor

Affected Software

FreeBSD
Vulnerable Versions:
14.3-RELEASE, 13.5-RELEASE

Timeline

Official Publish: March 9th, 2026
Last Modified: March 9th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access