Mariusz Zaborski

**Name of the Vulnerable Software and Affected Versions** FreeBSD (affected versions not specified) **Description** When processing the header of an incoming message, libnv fails to properly validate the message size. This lack of validation allows a malicious program to write outside the bounds of a heap allocation, which is a heap buffer overflow (a condition where data exceeds the allocated memory buffer on the heap). This can trigger a crash or system panic, and may allow an unprivileged user to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 13-RELEASE through 13-RELEASE-p4 **Description** The issue is related to errors in privilege management in the cap net service of the FreeBSD operating system. This could allow a remote attacker to modify the list of allowed domain names. Specifically, when only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including entries not previously listed, potentially permitting the application to resolve domain names that were previously restricted. **Recommendations** For FreeBSD versions 13-RELEASE through 13-RELEASE-p4, update to version 13-RELEASE-p5 or later to resolve the issue. As a temporary workaround, consider restricting access to the cap net libcasper(3) service to minimize the risk of exploitation. Avoid submitting new lists of domains to the cap net service until the issue is resolved.