Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ryan Libby

Researcher fromDell Inc.
#45925of 53,635
5.5Total CVSS
Vulnerabilities · 1
PT-2021-3594
5.5
2021-04-06
Freebsd · Freebsd · CVE-2021-29626
**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 13.0-STABLE before n245117 FreeBSD versions 12.2-STABLE before r369551 FreeBSD versions 11.4-STABLE before r369559 FreeBSD versions 13.0-RC5 before p1 FreeBSD versions 12.2-RELEASE before p6 FreeBSD versions 11.4-RELEASE before p9 **Description** The issue is related to the use of memory after it has been freed, which can allow an unauthorized party to gain access to protected information. Specifically, the copy-on-write logic failed to invalidate shared memory page mappings between multiple processes, allowing an unprivileged process to maintain a mapping after it is freed. This enables the process to read private data belonging to other processes or the kernel. **Recommendations** For FreeBSD versions 13.0-STABLE before n245117, update to a version after n245117. For FreeBSD versions 12.2-STABLE before r369551, update to a version after r369551. For FreeBSD versions 11.4-STABLE before r369559, update to a version after r369559. For FreeBSD versions 13.0-RC5 before p1, update to a version after p1. For FreeBSD versions 12.2-RELEASE before p6, update to a version after p6. For FreeBSD versions 11.4-RELEASE before p9, update to a version after p9.