PT-2016-2096 · Freebsd · Freebsd

Cturt · Publicado 2016-05-17 · Atualizado 2017-04-20 · CVE-2016-1886

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p42 FreeBSD versions 10.1 before p34 FreeBSD versions 10.2 before p17 FreeBSD versions 10.3 before p3

Description The issue is caused by an integer signedness error in the genkbd commonioctl function, located in sys/dev/kbd/kbd.c, which can lead to a buffer overflow. This allows a local attacker to obtain sensitive information from kernel memory, cause a denial of service, or gain privileges. The vulnerability is triggered by a negative value in the flen structure member in the arg argument in a SETFKEY ioctl call.

Recommendations For FreeBSD version 9.3, update to p42 or later. For FreeBSD version 10.1, update to p34 or later. For FreeBSD version 10.2, update to p17 or later. For FreeBSD version 10.3, update to p3 or later.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2016-01448

CVE-2016-1886

FREEBSD-SA-16_18

Produtos afetados

Freebsd

Referências · 9

• 🔥 http://cturt.github.io/SETFKEY.html · Exploit
• 🔥 https://exploit-db.com/exploits/44211 · Exploit
• http://securityfocus.com/bid/90734 · Nota
• https://security.freebsd.org/patches/SA-16:18/atkbd.patch · Correção
• https://freebsd.org/security/advisories/FreeBSD-SA-16:18.atkbd.asc · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01448 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-1886 · Nota de Segurança
• http://securitytracker.com/id/1035905 · Nota
• https://osv.dev/vulnerability/CVE-2016-1886 · Aviso do Fabricante