PT-2017-2032 · Freebsd · Freebsd

Mateusz Guzik · Publicado 2016-01-14 · Atualizado 2017-02-17 · CVE-2016-1880

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3, 10.1, and 10.2

Description The issue is related to the handling of Linux futex robust lists in the Linux compatibility layer of the kernel, allowing local users to potentially gain privilege and read portions of kernel memory via unspecified vectors. This is due to insufficient access control in the kernel.

Recommendations For versions 9.3, 10.1, and 10.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-01199

CVE-2016-1880

FREEBSD-SA-16_03

Produtos afetados

Freebsd

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1880 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-01199 · Nota de Segurança
• https://freebsd.org/security/advisories/FreeBSD-SA-16:03.linux.asc · Aviso do Fabricante
• http://securitytracker.com/id/1034675 · Nota
• https://osv.dev/vulnerability/CVE-2016-1880 · Aviso do Fabricante