Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Pieter De Boer

#49914de 53,635
4.9CVSS total
Vulnerabilidades · 1
PT-2009-4391
4.9
2009-06-18
Freebsd · Freebsd · CVE-2009-1935
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 6.3 through 6.4 FreeBSD versions 7.1 through 7.2 Description: The issue is related to an integer overflow in the `pipe build write buffer` function, which is part of the direct write optimization feature in the pipe implementation. This allows local users to bypass virtual-to-physical address lookups and potentially read sensitive information in memory pages. Recommendations: For FreeBSD versions 6.3 through 6.4, update to a version that includes the fix for the integer overflow in the `pipe build write buffer` function. For FreeBSD versions 7.1 through 7.2, update to a version that includes the fix for the integer overflow in the `pipe build write buffer` function. As a temporary workaround, consider restricting access to the pipe implementation to minimize the risk of exploitation.