PT-2017-2030 · Freebsd · Freebsd

Brent Cook + 2 · Publicado 2016-01-27 · Atualizado 2017-02-17 · CVE-2016-1883

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 through 10.2

Description The issue is related to the issetugid system call in the Linux compatibility layer, which has inadequate access control. This allows a local user to gain privilege via unspecified vectors.

Recommendations For versions 9.3 through 10.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-01197

CVE-2016-1883

FREEBSD-SA-16_10

Produtos afetados

Freebsd

Referências · 5

• https://freebsd.org/security/advisories/FreeBSD-SA-16:10.linux.asc · Aviso do Fabricante
• http://securitytracker.com/id/1034872 · Nota
• https://bdu.fstec.ru/vul/2017-01197 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1883 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1883 · Nota de Segurança