Kristof Provost 64af73aade pf: Ensure that IP addresses match in ICMP error packets ... States in pf(4) let ICMP and ICMP6 packets pass if they have a packet in their payload that matches an exiting connection. It was not checked whether the outer ICMP packet has the same destination IP as the source IP of the inner protocol packet. Enforce that these addresses match, to prevent ICMP packets that do not make sense. Reported by: Nicolas Collignon, Corentin Bayet, Eloi Vanderbeken, Luca Moro at Synacktiv Obtained from: OpenBSD Security: CVE-2019-5598		2019-03-21 08:09:52 +00:00
..
ipfw	Do not enter epoch section recursively.	2019-03-20 10:11:21 +00:00
pf	pf: Ensure that IP addresses match in ICMP error packets	2019-03-21 08:09:52 +00:00